Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
File:                     xRGedSADkvGi8IvpkHMtgEeyiwk.cer (raw, json)
Hash identifier:          JRLW+sS+fIQL5lNc2ukWetECGnMav1j//IdHiLBxcf0=
Subject key identifier:   C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427481C2D07E8DD0EA9BCD9807E4CDBEB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57388
                          IP: 130.0.24.0/21
                          IP: 185.85.152.0/22
                          IP: 2a02:dd00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:1c:2d:07:e8:dd:0e:a9:bc:d9:80:7e:4c:db:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c5119e75200392f1a2f08be990732d8047b28b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:3a:60:98:23:4d:2a:14:c9:f2:b3:6f:69:
                    39:38:78:55:04:1f:ca:00:3a:d0:59:91:99:b7:88:
                    61:bd:24:9f:72:2c:e9:db:c0:ab:91:7f:5b:c3:17:
                    eb:c8:3d:05:c3:07:f5:54:7d:68:c3:ae:e7:86:c7:
                    13:46:30:21:9c:7f:d4:1c:95:84:81:e7:e9:76:e5:
                    35:48:b4:28:6b:c4:23:9c:57:9b:75:ec:43:37:b6:
                    0a:3e:3f:0a:b3:50:1f:de:c7:4f:0d:99:40:d9:3b:
                    58:38:ab:3c:e6:66:34:d5:81:d8:f4:ab:54:21:14:
                    1d:6c:ca:3d:57:38:8c:74:37:1a:06:77:5f:8d:ae:
                    e1:59:bb:30:e5:86:ff:3e:e6:f6:65:62:c6:b4:d9:
                    93:45:1b:1d:19:67:ea:f8:32:bf:05:ed:36:9c:f6:
                    43:93:4a:13:e4:f1:5b:d9:14:e2:f1:3b:72:b2:91:
                    e6:fe:93:64:0f:aa:ba:e8:48:a6:de:a3:a9:1a:24:
                    46:6e:67:20:10:47:fa:79:24:83:5e:31:01:3f:b6:
                    e8:98:d0:77:75:04:76:1c:18:c4:3e:85:89:ce:32:
                    eb:32:2b:7e:b3:26:c9:e7:98:7a:a3:a4:09:fd:91:
                    3c:4a:ea:f7:03:02:cb:29:74:85:cc:96:53:dd:d5:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.0.24.0/21
                  185.85.152.0/22
                IPv6:
                  2a02:dd00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57388

    Signature Algorithm: sha256WithRSAEncryption
         5e:f4:4d:da:c9:8a:c1:d1:55:db:ed:ab:21:32:31:b7:48:2e:
         24:97:c7:5b:79:5a:be:b2:eb:e9:2f:39:ab:44:7d:5b:57:b1:
         9b:a8:d8:1f:a0:af:0f:37:1c:9f:07:2b:e1:8c:f2:1d:50:71:
         be:44:3d:55:f5:a3:ee:45:87:5b:69:e1:0d:24:d7:16:07:90:
         62:7c:87:4d:0f:bd:aa:4f:f3:1f:33:83:c7:be:ab:63:e3:4b:
         43:c2:9a:c1:90:65:6e:92:76:1b:ee:45:4f:20:cc:b8:ba:10:
         a5:93:79:01:34:69:0d:44:27:2a:74:56:13:fb:d2:57:99:5b:
         d0:ec:05:0d:a0:14:a4:40:0b:72:df:0a:9e:cb:a5:85:d8:40:
         28:fc:50:55:82:1f:f1:ab:c4:6b:e0:cc:1a:1d:25:63:f5:1f:
         43:9a:d5:cd:b2:ca:fa:a1:c9:a6:d4:e4:75:af:66:97:49:11:
         2c:88:b7:61:29:f0:c8:1a:56:59:80:b5:1c:6b:38:3d:ae:d9:
         3d:b9:24:53:d5:c4:41:95:9b:83:56:4b:98:0e:95:65:e0:f1:
         9f:28:e6:8f:72:23:7f:9c:13:d3:2b:04:7c:86:92:ca:5d:86:
         2f:60:b4:23:1c:d6:0e:c2:86:96:f2:d1:07:f5:7c:9c:1f:bf:
         df:bb:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----