Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer (raw, json)
Hash identifier:          7JD90/OnPh3osjyOq6n8vYtepYomYCRttC1OVSkOTBg=
Subject key identifier:   48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C5502657EBC987288D8DFC17CF360
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209790
                          IP: 83.150.208.0/22
                          IP: 2a09:1700::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:55:02:65:7e:bc:98:72:88:d8:df:c1:7c:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:aa:41:e8:20:1b:19:42:ed:32:60:79:03:
                    9e:b4:72:e9:3c:d3:d0:05:ce:6e:20:c8:26:f6:a0:
                    d9:85:9b:d1:00:c7:5c:17:d4:5e:61:f0:be:44:de:
                    49:00:8c:4c:01:b2:d5:a1:d4:4f:2f:b9:87:2a:b8:
                    12:c0:48:0a:39:63:d0:82:cb:05:c0:a6:7b:4c:61:
                    64:5e:52:c8:33:1e:53:8a:6f:49:f6:3c:fa:c3:a9:
                    db:13:f4:f7:35:8b:84:7c:b4:4f:38:7b:d7:ae:5b:
                    9a:0f:da:a6:1e:21:fa:80:64:d9:fc:dc:4e:67:7f:
                    44:a7:17:f3:8a:5b:9a:0b:db:6a:d9:82:77:73:d5:
                    e3:d5:ee:33:9d:18:e7:a5:2e:12:7c:8b:c9:1f:78:
                    5b:12:5d:0a:0e:c8:16:0c:48:6e:b7:8a:b3:29:69:
                    c4:7c:f3:9a:a2:94:ee:59:f1:c5:55:42:b8:e8:f0:
                    47:fe:53:1a:44:d9:8c:d0:e5:0c:66:4e:d9:08:ea:
                    ea:db:59:d4:76:62:1e:bb:a8:b8:a1:94:ec:e2:d2:
                    4c:39:44:2a:4c:e0:58:15:e0:14:e6:16:bd:6f:97:
                    b4:87:9d:2f:ba:78:53:19:8a:a4:db:2b:50:07:e8:
                    8a:35:c8:9e:c1:79:35:91:3e:77:65:2a:ae:9b:5d:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.150.208.0/22
                IPv6:
                  2a09:1700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209790

    Signature Algorithm: sha256WithRSAEncryption
         92:25:b1:07:46:af:f1:83:61:5c:9a:27:3c:f9:e2:1b:bc:c4:
         34:d8:aa:d0:45:ce:a3:27:4b:72:08:5e:0c:67:8b:f1:b5:c3:
         40:92:37:be:59:22:82:da:c3:66:a1:25:2f:f7:a1:ab:6c:18:
         aa:5c:68:3c:1f:4a:f3:db:09:58:2c:45:db:62:53:d8:e4:1a:
         a8:56:67:63:38:18:31:41:ef:34:a4:4b:09:14:b5:06:7d:d2:
         3d:67:f4:6b:05:a1:bd:f7:47:06:c2:2c:a9:fb:a0:68:c6:25:
         6e:70:ec:97:0b:0d:45:7a:cf:f1:23:85:d9:72:0b:cd:dc:28:
         c3:8a:53:1e:5f:d2:ab:6b:a7:cf:6e:b3:e3:1f:e4:0e:da:33:
         a7:86:85:1b:0e:1a:85:e4:6d:8b:0f:bc:04:e2:a9:d9:d1:56:
         da:79:e5:7c:ea:9c:d3:2e:4b:fd:ea:c4:ae:2a:01:d6:4f:d9:
         07:27:a9:02:fa:65:8d:73:fb:25:48:0c:48:82:c1:89:8b:92:
         7a:1a:54:f6:7c:3e:26:69:44:92:00:af:a1:40:90:e0:11:2e:
         f7:3d:dd:e1:95:ed:06:16:56:88:35:38:d3:4c:82:2f:d7:6d:
         06:87:0d:72:5b:88:a1:a6:8f:5a:7d:29:0c:8a:b0:ec:2a:51:
         0a:28:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----