Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
File:                     XjmfupqunS1v_lKujHSuOPxsGvE.cer (raw, json)
Hash identifier:          ddE3yIBi9jDoquZgTs1F7itgGd7crWlTEIaIj+GqxJI=
Subject key identifier:   5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FBAE63312142C6D1679EDD7F661D53
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211083
                          IP: 185.198.70.0/24
                          IP: 2a11:6c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:ae:63:31:21:42:c6:d1:67:9e:dd:7f:66:1d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:db:1e:e3:55:4e:18:73:b7:03:d5:48:29:27:
                    a6:71:bc:24:c5:f5:00:9a:9c:c3:46:d4:64:bd:28:
                    05:ac:a0:ab:55:ec:0f:68:19:bc:e2:f8:ff:66:8b:
                    a3:14:d2:61:46:6f:fd:c7:27:cd:69:e4:bb:fe:91:
                    2a:8d:22:6b:98:22:4d:f1:84:8a:ff:ed:b0:6a:5b:
                    d2:3a:e6:6e:6d:77:4d:73:c7:49:bc:1f:7c:16:2d:
                    8c:f8:d5:90:1c:56:1b:60:47:8b:a7:e9:00:b1:7d:
                    40:23:06:d8:e4:f2:bc:58:10:c9:03:f4:ff:20:be:
                    b4:ea:19:38:fe:a6:48:14:68:f3:a8:75:c2:2f:d9:
                    c7:be:39:0e:d8:77:94:99:2d:66:4b:96:63:1f:41:
                    db:7c:0a:4b:38:5e:18:c0:7e:a0:55:b6:8a:94:a2:
                    d0:e9:d1:e9:d7:28:7c:fe:9d:89:18:cb:73:06:8e:
                    ba:44:46:0a:b0:b9:ef:cc:be:6a:b0:3d:20:28:7a:
                    66:05:e0:bf:85:59:6d:93:ef:12:0f:13:08:77:5d:
                    72:a7:4d:94:da:c1:d3:85:7b:ea:a9:77:89:1d:7c:
                    78:27:6b:b3:46:54:03:e0:f4:ac:f1:69:e1:e3:89:
                    a2:42:ba:9c:48:46:b8:ea:b9:dd:04:04:32:e7:b6:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.70.0/24
                IPv6:
                  2a11:6c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211083

    Signature Algorithm: sha256WithRSAEncryption
         5a:17:bb:09:04:93:95:18:b1:3e:f4:1b:3e:dd:34:63:67:b0:
         95:b0:6e:c2:ee:fe:c6:fc:12:af:05:29:b3:8d:f5:27:23:1c:
         24:bf:51:f3:51:f6:1f:b3:bc:01:b4:b0:b4:27:91:af:cd:e1:
         0b:64:d1:92:50:85:6e:b4:fd:f8:92:4e:12:1e:36:e1:87:02:
         c2:c1:f1:8f:a0:dd:7c:d7:2e:c7:1b:87:3d:83:29:e4:34:e4:
         86:b9:58:f1:4e:9f:4a:9a:be:9e:52:cc:59:0e:c6:11:2b:9c:
         1c:65:d6:e5:95:38:f2:cd:49:fc:93:a5:8b:fa:39:0e:7b:21:
         ab:f1:ba:13:62:15:36:a3:b5:e1:f9:cf:0a:9d:1d:f3:21:60:
         8e:5c:5e:48:1f:e8:84:81:b4:6d:d2:c5:4c:f3:b4:41:93:6f:
         2b:88:b0:c3:35:8f:e9:70:36:a8:55:e5:15:fe:68:4c:c9:46:
         9d:23:6f:03:5d:ef:f4:60:c3:c0:dc:1f:10:b6:04:f3:fc:2c:
         8d:6a:3f:c0:32:8d:f6:61:24:40:a8:fb:f9:d7:33:a7:f9:9f:
         cd:45:b9:4d:da:ce:ec:17:4e:75:46:9c:34:fd:7b:aa:fb:75:
         06:9b:c3:ce:42:c0:c0:be:0a:1f:0d:e9:2d:a4:eb:c6:65:39:
         21:2b:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----