Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
File:                     I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer (raw, json)
Hash identifier:          Kv6J14GK+SKHUSAM7HLtaOQtpi5gatoOGDA4bXYGrtc=
Subject key identifier:   23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA8EC900C286BD80FA53F6EC173496
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208250
                          IP: 45.150.120.0/22
                          IP: 2a0f:be00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:8e:c9:00:c2:86:bd:80:fa:53:f6:ec:17:34:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=235163d39db88816cddc597a5db5eae707d3de39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:98:f9:1e:81:54:b2:f3:56:e8:22:95:f6:
                    82:8b:76:78:f7:3e:a2:08:f5:44:a9:be:a6:3d:12:
                    20:d8:3a:14:b6:af:4a:99:0c:2c:fd:a3:3e:0f:b1:
                    31:3b:ff:c1:d6:0c:92:43:7c:17:09:fe:24:fe:f7:
                    db:3c:87:61:74:b9:13:7c:1a:e1:df:77:86:9e:30:
                    3b:9b:67:c8:bb:13:85:c0:50:de:43:f0:26:46:72:
                    97:ae:0a:3a:bc:88:49:a1:d4:8a:87:dc:43:ec:74:
                    e2:f5:94:6b:53:29:e0:f0:81:84:41:a2:27:c6:ef:
                    15:47:9f:08:a5:72:86:43:d5:23:1d:73:85:7a:43:
                    e5:b1:a4:be:11:26:8c:a0:67:f8:ab:4a:13:a7:8f:
                    01:73:55:0e:ce:51:c8:97:21:56:55:56:7a:6a:19:
                    1f:49:7c:51:48:ae:6d:d0:d8:94:15:ce:90:18:5d:
                    40:28:21:06:50:2f:13:10:a5:9d:a5:45:e0:7c:62:
                    f9:67:1b:55:e8:6b:12:3c:cd:a6:c1:17:d5:88:28:
                    c8:65:5f:e7:f0:da:a0:36:7c:54:07:82:10:19:2f:
                    a5:15:92:14:b3:43:b0:5b:ab:82:b7:84:2b:30:78:
                    18:0d:43:c5:73:3f:04:ec:90:39:ea:cb:e6:bd:df:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.120.0/22
                IPv6:
                  2a0f:be00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208250

    Signature Algorithm: sha256WithRSAEncryption
         a2:97:d9:ad:ce:f3:2f:ce:af:f0:c8:c1:58:d3:45:cc:ef:7c:
         a0:72:d2:88:78:9f:5b:19:05:93:08:2e:b3:05:6f:5f:d0:dd:
         1f:bc:61:b3:b6:40:3a:33:44:fb:d7:15:7a:92:c5:18:cf:46:
         45:62:2e:e1:b3:3c:45:5d:a3:b6:e4:41:25:9f:be:a6:db:16:
         b9:f3:1a:07:1d:88:29:14:01:dc:70:eb:d2:1b:30:ba:4b:ed:
         c6:39:6f:43:e0:f8:11:a1:15:46:29:fe:57:74:15:59:22:2b:
         d0:53:52:63:48:a3:7e:f2:e0:b6:db:07:d8:7c:97:c2:fd:13:
         76:10:de:d9:0a:bd:0a:29:2c:2b:8a:5e:d0:4c:13:77:f5:ee:
         47:b2:66:9f:c8:6e:04:f8:8e:ca:7a:8d:cc:e1:e8:6c:09:fd:
         39:30:90:64:f1:ff:81:72:df:e4:5a:28:63:d8:e9:d2:8e:12:
         99:bb:8c:ca:c7:c9:3f:9a:99:73:90:19:08:a5:1c:45:68:03:
         4c:64:46:e4:50:b0:b5:b0:6c:bc:91:bd:02:9d:fe:80:32:14:
         5e:e1:cd:81:9f:86:fe:71:30:cd:2f:c9:4f:d1:1c:14:a1:64:
         05:da:8c:ba:ce:0e:7a:95:12:bc:1e:f7:3d:f2:14:62:5b:a3:
         00:29:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----