Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
File:                     2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer (raw, json)
Hash identifier:          vhc1HMe8INHSNr8QSSBOC7yDhYRCtc10jFSFmb3G4Ug=
Subject key identifier:   D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D646CB406BA7F8887083A25B2B35DA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 28931
                          IP: 185.103.188.0/22
                          IP: 2a00:f400::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:46:cb:40:6b:a7:f8:88:70:83:a2:5b:2b:35:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c5:c9:58:d9:91:72:f1:03:9a:b0:bb:31:89:
                    d5:3c:bd:38:3b:01:ee:9c:ae:93:bb:ca:2f:80:58:
                    07:d9:a1:61:32:2b:71:a6:99:dd:fa:d0:fe:65:d6:
                    cf:4c:23:d1:01:c1:a6:e5:bd:99:6e:af:6c:d9:2d:
                    20:03:57:b1:7d:51:30:c8:42:89:22:1d:8f:41:d9:
                    f9:8b:4d:e1:d9:c3:54:75:3b:19:a3:28:f5:a7:94:
                    01:82:d8:06:28:70:20:4a:a4:52:84:a7:99:a4:97:
                    14:f2:6e:67:7d:07:04:98:a0:dc:d4:9c:cc:6e:35:
                    c7:68:cc:78:78:91:2e:c0:19:6b:1e:4c:65:35:c3:
                    03:0e:37:9d:01:25:60:16:74:7d:a7:3c:e7:bd:47:
                    55:ea:69:3b:0b:7a:4e:a5:61:30:27:64:d7:30:be:
                    1a:76:64:e1:4b:c2:54:eb:e3:73:bb:ac:fa:06:4c:
                    69:db:1e:51:cd:e9:05:a1:5d:a2:fc:9d:36:8e:2f:
                    65:27:ea:7b:c0:e8:bd:e3:83:3f:cb:c3:2f:a5:75:
                    88:a4:6d:96:c7:b4:5a:7c:a6:28:c0:df:42:1d:ce:
                    66:0a:42:dc:d2:f3:cf:38:59:58:a8:fe:5b:1f:22:
                    3d:33:01:d1:e5:22:cb:21:5e:8c:02:c9:0d:62:68:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.188.0/22
                IPv6:
                  2a00:f400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28931

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:4c:36:9e:05:ee:fd:c8:5d:e4:de:74:ed:34:2c:ab:20:
         46:f2:3b:f8:53:8d:e0:57:00:6d:11:a8:0d:6e:ce:f4:98:b1:
         15:20:d7:e9:35:f2:4f:d2:7e:b6:e5:ca:06:cf:ac:bb:c4:c2:
         95:65:97:38:46:ab:33:a7:22:65:db:36:08:58:bb:67:3c:2a:
         e0:5f:44:45:85:cc:39:44:e8:46:a2:d6:6a:1f:78:53:78:bb:
         f9:24:b2:19:69:45:02:ea:cc:3e:45:ab:08:43:db:20:bc:1c:
         68:c4:98:4c:d8:57:d8:44:ac:93:5d:4d:a2:89:8b:03:54:cf:
         e2:73:a1:7f:94:59:a6:e9:7b:08:9e:ba:b6:f3:51:f1:ca:ee:
         64:b1:57:47:e3:80:fd:23:ca:0b:df:7b:d5:3c:36:3d:f2:37:
         a8:b4:85:ac:c8:59:3e:4d:3e:87:82:84:0c:17:c5:16:98:c2:
         fb:73:52:40:76:e5:cd:2a:c5:61:28:7a:cd:90:3a:4b:ad:0c:
         cd:b7:7a:91:49:61:5e:fb:5b:f3:d5:40:bf:fd:9f:fc:ac:d1:
         37:83:12:ca:67:89:f6:f2:09:fc:dc:aa:96:10:88:83:df:97:
         b2:e7:ee:d6:f9:5a:ae:60:0a:f3:be:f7:fc:86:95:4e:e0:21:
         fd:f4:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----