Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
File:                     jtmMBXCv6fGq69DZ6i_CjB39mIk.cer (raw, json)
Hash identifier:          EJtTZ0K93xisB3uFIAOI0X7qOdNptuti6cnF1Fq5GQk=
Subject key identifier:   8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FFEC6DC29BF7617E4E48E472A619B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211028
                          IP: 194.39.108.0/24
                          IP: 2a11:2200::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:fe:c6:dc:29:bf:76:17:e4:e4:8e:47:2a:61:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:02:34:26:42:51:6d:4d:86:d8:d1:71:a6:
                    4c:85:fb:8f:38:f9:88:f5:c4:57:ac:37:ec:2d:a3:
                    89:a1:97:2c:c9:9a:4a:2a:7f:1b:92:51:3f:e6:6c:
                    ec:1e:e2:78:9c:01:61:2d:ed:4d:26:2a:ee:df:d9:
                    0a:c6:c6:14:83:b6:16:21:b4:86:8a:57:a1:02:bc:
                    8f:d4:b5:b8:6e:9f:42:d4:00:54:dd:ae:a2:a1:f9:
                    3f:25:c8:e3:93:8d:99:e1:9c:fe:20:c1:6e:32:65:
                    e5:d3:de:f5:e9:85:bc:73:30:ef:5d:40:4b:ca:98:
                    80:c9:23:4d:5d:d0:50:ff:a6:45:d6:2c:ef:0f:ac:
                    7f:4d:bd:92:ae:5a:d6:ca:e8:61:67:83:58:58:83:
                    f3:88:57:94:a1:54:1f:4b:7f:ad:08:fd:9e:d9:3b:
                    da:4f:f2:7d:d2:68:cb:7e:cd:0d:19:d9:bc:2b:ad:
                    06:b4:89:f0:31:2a:22:7f:14:17:11:22:1f:72:a6:
                    9c:52:0c:c2:74:83:fa:1d:28:4b:7e:70:9d:ee:d9:
                    cb:2d:cd:54:03:00:4d:95:13:7b:10:06:aa:45:15:
                    cd:6d:cd:bd:ed:36:23:10:fe:ce:a2:f4:3c:4d:2e:
                    23:d9:6e:f4:43:b3:2f:7a:8a:95:c1:28:00:74:ae:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.39.108.0/24
                IPv6:
                  2a11:2200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211028

    Signature Algorithm: sha256WithRSAEncryption
         b0:d5:e1:1b:0c:59:72:d3:b8:37:ee:37:61:bd:a4:9c:06:06:
         80:d5:04:94:ae:26:f8:45:3b:1b:82:fc:da:2b:2f:b8:09:5c:
         93:02:35:52:3d:04:09:e9:a1:c7:61:91:f7:d9:d4:c3:85:17:
         6c:7d:b0:cf:a3:e8:65:ff:79:c0:1e:d0:d9:59:21:65:87:34:
         f4:d8:ae:c0:b0:b0:e4:16:83:b6:7b:ed:a1:b9:6c:66:17:e3:
         79:2f:63:8e:f7:a0:b6:80:e1:3d:04:90:25:a9:db:2f:f2:b1:
         4b:81:38:f3:94:35:10:91:b1:16:aa:89:2b:5d:6c:56:66:e0:
         a4:8f:8f:a2:bb:88:76:6f:12:f3:26:3b:83:db:ce:48:29:1b:
         b8:21:4a:30:0e:6f:77:dc:d6:93:db:64:fc:54:92:ee:37:42:
         5f:bd:fb:a6:5e:4c:43:a5:5d:2d:40:3c:36:ca:2b:44:c9:3b:
         96:d7:35:ec:81:79:47:da:6f:bf:3c:b7:22:fd:86:1e:fe:d1:
         82:9f:d2:c0:1b:14:03:b4:c4:fb:c3:37:ad:6f:02:1c:31:c0:
         f3:31:58:0a:c7:9a:2a:04:66:46:b5:87:c5:a9:54:8c:c8:7b:
         66:9b:88:9a:f6:cc:76:e6:54:ed:4a:22:5f:f6:a5:56:bb:de:
         dd:69:cd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----