Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
File:                     1GL5scD2-pylMXZOJtOu0hG_7YE.cer (raw, json)
Hash identifier:          E1HXnC59hQZ0bGw735MTzdud79WwpU7Y8+lJKTexu90=
Subject key identifier:   D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266AF189C964C69A863F984E12B3A789
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:48:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198882
                          IP: 91.240.35.0/24
                          IP: 2001:67c:29d0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:f1:89:c9:64:c6:9a:86:3f:98:4e:12:b3:a7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:6b:e5:f8:f7:5d:69:f2:ef:b9:d3:a7:8c:
                    b9:39:0d:21:8c:b5:0d:99:40:78:8b:21:2d:61:e4:
                    8c:1f:90:74:c2:0c:c5:03:57:0b:7d:d6:89:79:5d:
                    2a:38:76:8f:5f:fe:3b:e1:f2:1b:bc:9e:be:ed:7b:
                    69:2c:ed:4a:08:22:4d:ff:c0:79:87:1c:60:a9:2b:
                    22:3a:6f:ec:6e:28:0d:48:c4:e5:35:86:f8:a9:9d:
                    f1:5f:29:12:2b:ac:a1:c7:ac:6e:b2:a8:d6:9c:5c:
                    6a:a4:47:a6:f3:6d:a2:25:27:ff:1a:d7:60:b2:c5:
                    48:19:3a:c6:45:8f:26:26:e6:dc:8c:84:2e:2e:b1:
                    1d:21:98:35:55:d9:4a:64:ac:aa:ca:1b:15:4d:93:
                    8b:ad:b1:1d:d4:9b:63:eb:35:07:8b:b3:25:b0:8d:
                    58:67:0e:9e:a0:b5:39:71:49:29:43:82:65:63:0e:
                    1d:af:62:e4:7f:da:0f:ea:5d:65:30:ed:cd:8a:d2:
                    af:11:88:d0:e7:67:c7:e7:40:f7:a5:69:95:ea:51:
                    6e:95:e3:49:eb:e7:a1:51:8b:cc:61:72:d0:b3:0f:
                    59:79:4b:5e:ba:ab:2e:44:15:9e:e2:94:72:06:bd:
                    e8:62:5f:10:40:49:f8:34:0b:bb:d7:a7:3c:47:35:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.35.0/24
                IPv6:
                  2001:67c:29d0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198882

    Signature Algorithm: sha256WithRSAEncryption
         46:da:ab:2f:41:dc:77:b2:40:13:44:b5:d5:0a:70:5d:3b:ba:
         be:64:5a:d6:ad:d9:76:22:25:92:9a:5f:2f:e2:e6:84:71:88:
         06:f3:57:ad:f0:3b:ee:65:a5:c3:58:87:25:11:06:84:26:21:
         c5:35:3a:72:1e:67:57:2e:5c:73:4e:eb:c3:ef:89:ef:cd:05:
         cd:c1:f0:4a:f9:80:73:84:87:5d:0e:1c:f7:10:5a:3a:3a:d7:
         d7:a1:de:e7:67:f2:0e:70:49:72:62:a9:ee:66:70:6f:35:af:
         93:5f:5d:54:02:47:1a:17:4d:dc:3a:18:e2:c1:ac:56:ee:4b:
         7e:3f:f0:b0:0a:92:98:e0:b3:f8:48:f4:4d:66:b1:b1:44:9f:
         b4:93:11:cd:bf:b0:2e:1b:fe:be:73:07:93:9d:4b:f7:ba:d0:
         9e:59:1a:6c:ed:fb:02:95:09:75:72:e4:3c:11:19:80:b2:b0:
         e2:4f:26:ad:d3:ed:6b:78:3d:bb:75:0d:e8:b0:26:fe:3c:48:
         31:1a:26:3b:f2:8d:0b:36:ea:27:43:1c:cf:48:98:d1:05:6f:
         80:98:63:1a:6a:b6:d3:4f:eb:7a:10:e1:7f:b7:ec:e1:fd:ce:
         25:3f:4e:01:e1:29:18:b0:49:1e:7b:55:60:aa:fd:6e:95:75:
         62:96:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----