Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
File:                     GzaOcCad5mDLwU35x2OwGHiKH_w.cer (raw, json)
Hash identifier:          usnGrD0gQZnSoTkJBMGP5R9pSkWy2xYtbAv3HPUdkFw=
Subject key identifier:   1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194282313BD8D897AC47E163DEB0660AE4E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:49:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204824
                          IP: 185.218.48.0/22
                          IP: 2a0b:d340::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:13:bd:8d:89:7a:c4:7e:16:3d:eb:06:60:ae:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:49:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1b368e70269de660cbc14df9c763b018788a1ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:38:2e:19:15:b6:ba:04:25:3e:87:59:1c:8c:
                    e8:de:79:5d:b1:60:3b:64:ed:93:02:b8:b2:d1:32:
                    90:1a:e7:07:aa:1c:9b:6d:33:64:39:b8:70:33:53:
                    74:57:d8:4a:80:21:58:d5:40:8b:d6:28:53:b7:d7:
                    8e:de:e2:79:c1:27:e7:c9:ae:11:2e:3a:ac:3e:be:
                    79:b2:06:9d:ac:6a:7f:a9:1c:e7:d7:1b:52:96:80:
                    eb:2f:ed:ef:70:09:97:ae:c6:26:a9:0a:f0:d6:c2:
                    46:09:04:f5:3b:bc:bd:0b:de:fd:98:c1:08:59:21:
                    79:05:5b:f6:b8:42:02:e5:fb:36:f3:d6:0f:48:0e:
                    09:ab:a9:4b:40:2a:e7:e9:d3:73:2c:c8:76:f5:12:
                    5d:fe:bd:d7:73:b1:c4:1a:8c:82:2d:96:98:96:ed:
                    99:71:59:ac:b0:ed:62:3f:ef:c2:f5:cf:25:88:23:
                    c8:a4:c4:96:11:3a:ed:4b:60:f7:45:84:c3:fd:7c:
                    ab:44:9a:a5:03:d0:5a:f1:18:0f:ba:0b:8d:f9:ed:
                    d7:e2:f8:8c:1c:95:c1:9a:a0:79:4d:2c:2b:e4:aa:
                    a2:52:e5:65:e5:be:5a:67:30:48:50:67:84:2c:77:
                    f4:4a:10:2b:ea:e0:43:56:d0:d7:d3:23:69:52:83:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.48.0/22
                IPv6:
                  2a0b:d340::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204824

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:60:93:e2:0d:64:d5:e8:cb:f2:35:22:97:59:ad:65:cb:
         85:0f:27:05:35:81:cc:bd:c3:eb:e5:e0:6e:3d:1c:7f:6a:18:
         4e:b3:1f:dc:c0:46:ce:fd:db:0a:06:af:34:65:b9:9e:b1:39:
         b6:4f:6a:f8:cd:da:31:30:a8:ea:07:72:bc:03:7a:9c:98:cf:
         7c:fa:ae:8d:6a:01:0d:ae:0c:0f:bf:d8:bf:f5:e3:ac:b2:5a:
         c7:22:0c:75:fb:ce:85:a0:f9:a3:c5:c3:2c:bc:03:a1:2e:22:
         00:14:e3:b3:70:b2:db:d2:58:d2:51:a0:e6:01:36:07:d7:0a:
         a8:ca:ad:c7:96:a0:65:1c:79:f6:06:61:5e:c9:84:a3:f6:b3:
         a0:fa:9d:80:d6:5d:2d:c8:46:bb:cc:77:81:fa:b0:bc:a9:c0:
         d8:5c:6c:5b:1f:9e:09:85:33:28:b3:aa:2a:f9:bd:c5:fa:11:
         63:2c:da:9f:44:85:86:52:ed:11:bd:58:c1:67:b0:cd:e2:4b:
         a3:56:f5:6c:6a:3b:02:04:85:74:83:84:f2:43:d6:86:66:c2:
         2e:f6:88:d3:4c:0c:ca:84:ae:cc:97:5c:bc:67:0f:5c:30:9a:
         df:ea:63:7c:72:c1:f3:02:11:45:9a:9c:02:99:96:c4:ff:45:
         47:6d:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----