Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
File:                     H8WVWUC711Vd8KLkFzefxEfvDNw.cer (raw, json)
Hash identifier:          87IghbOeUl4aZgI+IJfgA8Na4qj80dB+L0/CuPBM3wU=
Subject key identifier:   1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C272A64B1C06928834C568C5F52D5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207703
                          IP: 45.159.120.0/22
                          IP: 2a0f:7780::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:27:2a:64:b1:c0:69:28:83:4c:56:8c:5f:52:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d8:f5:23:71:74:00:5d:57:fc:71:d7:45:a7:
                    1f:ae:12:47:d7:44:79:3a:ce:d6:3b:0e:a7:09:a0:
                    50:cb:de:ae:01:9b:e5:a9:d0:e9:83:44:89:75:3d:
                    d9:f6:bd:e8:cb:d9:2e:0e:f0:f1:4f:e8:d9:d3:bb:
                    4d:c8:2b:e5:83:95:0d:ec:dc:9d:07:6d:e8:86:30:
                    3e:4b:c7:e2:06:d9:6d:b1:2d:bc:36:e8:6c:5a:b6:
                    49:bf:81:9d:7e:37:ad:14:e3:82:2a:ff:dd:eb:f7:
                    7d:d7:d6:3b:01:74:62:c5:f4:00:37:c0:50:23:e6:
                    c5:96:3b:e7:da:8d:b9:dc:0c:c9:53:21:b7:c8:82:
                    ba:0e:66:6a:1c:f2:13:32:ce:95:2d:86:fc:e8:dd:
                    f0:ae:9a:2a:4f:30:42:be:ba:72:5e:75:0c:ae:30:
                    2a:cf:55:b5:46:2e:63:4f:8d:ee:46:fd:e1:51:48:
                    89:fb:4e:a1:a0:95:1e:68:62:10:d3:8d:bb:a7:0b:
                    62:01:90:ff:ec:76:db:60:4c:60:46:c6:6a:7f:29:
                    5c:99:ba:f6:41:1b:64:2b:05:28:a4:0d:1c:66:2e:
                    3c:d7:f2:6e:bb:29:ca:8a:51:9c:5c:ad:62:fc:f6:
                    55:3c:5e:c3:32:3c:7c:a2:41:a9:ce:fe:82:2c:be:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.120.0/22
                IPv6:
                  2a0f:7780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207703

    Signature Algorithm: sha256WithRSAEncryption
         38:97:50:c3:9d:88:73:d1:41:e5:48:32:4d:df:10:04:5e:ca:
         ed:b3:17:f2:63:e0:17:86:d1:86:31:d3:65:33:7f:48:d9:f1:
         48:cb:24:ea:37:d7:52:c8:5a:2f:82:9c:cb:dd:97:6f:e3:2e:
         29:2f:10:54:29:19:2f:07:1b:6c:01:9b:f1:e4:d3:01:64:27:
         cc:6c:67:dc:cc:f9:61:37:0e:77:b8:43:8c:b3:39:20:4a:4d:
         d9:15:d2:b6:20:9d:13:ac:bb:97:64:ce:af:d3:23:19:8a:b5:
         f1:17:60:06:d4:f1:16:4c:a6:6a:69:8a:3a:22:66:44:3f:c8:
         55:77:2b:03:a3:b5:eb:64:e9:86:7b:e6:48:3d:33:63:f0:a7:
         31:94:eb:44:8d:0d:e0:a5:da:49:3f:a3:62:7a:62:14:62:4d:
         10:ea:da:a3:90:a0:fd:99:da:4b:c3:a1:81:c0:7d:5d:b3:0f:
         76:70:59:31:f4:de:19:d3:4d:c4:0c:42:6b:5e:a2:bd:d5:64:
         3b:8d:ea:88:41:4f:d0:7f:da:2b:75:cd:de:44:27:bc:b8:29:
         c4:68:ef:1d:94:60:b5:77:e7:82:93:4c:4a:84:06:69:48:d5:
         95:3d:eb:78:9b:06:00:c7:61:90:22:13:5b:df:45:78:0d:a8:
         f6:ae:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----