Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
File:                     IhHwQD6XRloB3RRbwVB75WVxDU4.cer (raw, json)
Hash identifier:          zl7meHtHp0iTKMYNFgBBSzZKUNLmKQpDFH0igjr7Aqg=
Subject key identifier:   22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422202CAEDE9DE43E459B7A7CCD0141F6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59505
                          IP: 185.230.104.0/24
                          IP: 2a10:28c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:2c:ae:de:9d:e4:3e:45:9b:7a:7c:cd:01:41:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2211f0403e97465a01dd145bc1507be565710d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:52:d4:cd:c6:9a:94:22:d5:be:e2:39:92:
                    b3:0e:ff:a8:fa:de:19:82:de:12:7b:56:35:da:86:
                    ff:de:7b:00:d6:ff:a4:97:63:89:3b:0c:7f:d5:cc:
                    b7:3f:9d:92:5c:44:ea:f0:e4:44:90:7c:96:04:4d:
                    46:50:75:2b:08:6a:b4:ab:f6:fa:72:c5:a8:73:cb:
                    80:b7:4d:a3:f8:18:66:dd:1e:95:e8:38:f4:9f:67:
                    dc:52:ff:6e:7b:c5:65:21:3a:cb:3e:f4:6b:8e:74:
                    64:6e:02:98:0d:1c:b9:5a:43:cb:0a:e1:3e:fc:97:
                    47:59:c3:ad:58:f2:7c:5a:a1:ec:51:17:df:09:8a:
                    1e:f9:09:d7:33:c5:12:40:90:6c:ce:5b:2e:a8:41:
                    5b:79:17:09:54:b0:58:21:2f:ca:4a:03:e5:14:1c:
                    3a:da:5e:df:2d:09:c0:71:d6:1f:9b:65:26:77:0d:
                    8d:9c:7c:26:1b:17:94:b2:76:d5:e9:0d:d0:88:a3:
                    8c:6a:9e:10:86:6a:f9:82:34:b9:a3:17:86:a4:60:
                    ee:86:ff:ab:26:ed:98:58:7a:28:a7:54:a4:ef:42:
                    f8:98:9f:1c:ed:3b:f6:46:88:85:ee:63:be:c6:d2:
                    77:1a:c3:1e:d2:0c:3b:ac:cd:96:d2:10:4f:06:f3:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.104.0/24
                IPv6:
                  2a10:28c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59505

    Signature Algorithm: sha256WithRSAEncryption
         0d:21:cb:93:ab:13:07:35:b2:bb:70:9b:06:65:ea:41:a3:8d:
         71:ed:fd:a6:fa:3e:ac:bd:d4:94:65:3e:66:9e:0b:66:76:fe:
         28:77:dd:45:7e:4d:15:10:52:50:ea:57:da:15:6b:d4:11:a7:
         f9:eb:a5:11:1f:6f:44:a7:c7:56:67:6f:91:27:8b:d0:ba:e0:
         32:2d:d2:90:23:fd:8a:ec:c6:c7:35:5c:e5:17:4a:94:87:d5:
         d1:41:24:44:8e:a1:81:77:b0:97:b6:80:3f:6e:5d:98:73:56:
         7a:ab:91:c0:5d:7c:2f:ac:c9:8d:82:1d:50:75:53:f9:16:09:
         4d:21:33:1c:30:c4:42:3b:8c:7c:02:6a:21:40:88:88:b7:04:
         7f:79:eb:e2:fa:a9:de:57:1d:3c:a5:e2:b0:d3:37:fa:e7:49:
         39:da:fa:70:5a:86:e9:34:86:87:16:35:5a:72:ea:0a:63:ea:
         a6:8e:fc:be:0d:43:d6:b9:2a:28:59:08:2e:a8:76:93:ed:8a:
         93:d3:ec:49:62:09:e2:85:9d:5a:37:77:f7:34:02:5d:f1:5f:
         10:7f:31:00:4e:ae:ad:b6:79:65:0d:0a:da:d2:e9:45:84:08:
         3f:5f:d8:29:3e:c2:0d:e3:6c:67:6c:ef:c2:59:27:4c:97:cc:
         b3:2b:22:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----