Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
File:                     G_x3OM0P0OBEf510nOajkEf9y6w.cer (raw, json)
Hash identifier:          u88IQ529SNZkBG2IRa0EHyvN09ihOKmHBHZ6YilrcPw=
Subject key identifier:   1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258FA62BDDD1FE7A4CE3E3C61051C98F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204694
                          IP: 185.243.72.0/22
                          IP: 2a0d:980::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:a6:2b:dd:d1:fe:7a:4c:e3:e3:c6:10:51:c9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:6f:7c:7b:eb:31:ef:70:1c:8b:f4:62:46:
                    89:e7:26:9d:13:09:3b:6a:d9:ff:86:0c:cf:a3:12:
                    8c:16:5e:1f:f4:b3:22:f3:cb:35:fe:42:4c:7f:7f:
                    e0:0a:40:b0:8e:e4:4c:9c:45:80:a6:8e:af:ea:23:
                    59:b5:1f:60:46:df:39:e0:74:c2:df:1e:8b:e0:9b:
                    d8:34:ce:19:f5:f0:c2:33:95:e8:21:ad:a3:ac:71:
                    bb:b7:20:7d:dc:a1:60:af:68:a6:6e:d0:23:2e:53:
                    4e:70:a4:ef:ba:4d:84:5a:06:3c:93:e3:c5:03:50:
                    b1:66:61:e5:1f:15:74:01:2a:ea:66:26:5c:42:5b:
                    45:ae:12:6a:85:5e:ff:20:c3:cb:42:41:e8:21:5b:
                    28:0e:17:f8:0b:6f:e0:d8:62:29:40:be:66:d3:fa:
                    30:01:05:e4:ad:b3:70:ce:d0:d1:ff:2c:cf:80:11:
                    e4:d0:4c:92:81:f2:03:d7:8d:21:b0:31:65:f6:27:
                    14:3d:23:2e:e6:3f:53:aa:0e:1e:c7:ac:5c:fd:da:
                    58:f3:54:4b:a1:74:44:bc:c5:61:fb:47:9a:e3:ea:
                    92:ad:a5:a8:19:2f:01:c9:17:cd:51:ef:99:2b:d7:
                    47:51:3b:4c:02:ef:21:09:41:22:de:06:38:fd:bf:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.72.0/22
                IPv6:
                  2a0d:980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204694

    Signature Algorithm: sha256WithRSAEncryption
         33:0f:f0:5d:6c:8c:17:bd:33:ba:58:2d:67:39:c0:62:63:37:
         ad:09:d0:be:38:6c:fb:82:4d:61:66:11:80:b2:8b:aa:22:8b:
         6e:f7:01:e2:67:d6:64:88:96:16:a0:96:33:f7:ad:0d:b4:72:
         70:62:f6:1e:ae:cd:fb:45:9b:3d:b9:5e:21:57:22:3d:a4:3b:
         2b:b8:e7:ee:b9:8b:6e:26:dc:2c:05:68:39:26:58:02:0e:a1:
         59:60:12:62:7c:60:83:ba:45:19:0d:ec:01:fa:3d:c4:85:70:
         41:37:49:15:9e:26:81:1a:20:e8:34:9b:c5:e8:e5:ea:46:43:
         73:7c:63:11:4d:f9:86:3c:2c:47:e8:36:54:68:fc:31:cc:d3:
         fa:d0:a9:da:5d:12:dc:a8:96:3c:3d:7f:14:72:8e:ed:11:b8:
         2b:ab:e6:a6:f2:50:b6:1c:94:78:b6:dd:00:fd:d4:74:d3:bd:
         2a:e5:22:c4:a0:da:10:ae:87:02:f6:52:92:e5:f3:db:27:8d:
         75:7a:c6:0b:12:2a:bf:5e:ba:0b:6d:f6:33:85:72:f4:36:1c:
         41:28:fc:1b:b6:f6:43:1f:ae:68:26:4c:36:d8:48:13:89:bc:
         0d:13:dd:3d:b8:8a:35:ed:72:d5:28:80:c9:31:a2:d9:08:e8:
         c6:5e:ad:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----