Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.cer (raw, json)
Hash identifier:          Mw81tXJGIdZtJTCg/L0MNgyq55Mhhk7d6kOJw5p06aE=
Subject key identifier:   81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C1563244B690F2EB81E1908B793CE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51910
                          IP: 46.17.72.0/21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:15:63:24:4b:69:0f:2e:b8:1e:19:08:b7:93:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:30:3c:35:95:6c:ed:5d:a2:81:e7:1a:b1:
                    34:a3:3c:c2:80:68:21:77:fe:da:e2:c5:5f:e2:ac:
                    27:41:26:5e:aa:db:d6:21:0a:39:86:a4:84:3e:62:
                    cf:5c:6b:06:fc:66:d1:57:f8:04:d5:54:05:42:88:
                    f5:e0:a5:50:2f:ac:9a:06:f9:b2:fc:b1:b4:c6:1d:
                    01:90:9b:c3:89:0b:6c:92:0c:c1:03:cf:30:7a:c9:
                    2e:1c:9c:03:3a:16:f4:c0:a6:74:bb:33:f9:b8:10:
                    f6:92:cb:19:33:23:cd:a4:fb:a3:2f:65:ca:0a:4f:
                    69:b5:6d:03:87:27:2d:df:f3:ca:f6:ca:e2:03:62:
                    75:16:f1:42:a6:f3:2d:c6:fc:78:fd:74:d5:f0:7a:
                    55:f9:2b:76:36:c6:3e:de:f7:1b:b6:c7:53:10:22:
                    50:58:c4:1b:38:8a:8c:bb:bb:f8:88:89:6a:20:dc:
                    5a:d3:20:6f:dd:39:0d:48:9c:d3:dc:6b:07:2c:d1:
                    b7:e5:3a:9a:aa:41:f8:f3:90:21:fb:3b:d5:5c:9a:
                    00:c2:02:ea:0f:7e:9e:00:81:73:2b:e8:a0:93:e6:
                    60:5e:c8:14:e3:2f:6f:90:73:84:21:dd:51:cb:d6:
                    f8:1c:1a:df:75:c9:dd:53:03:b2:d1:a5:94:16:2d:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.17.72.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51910

    Signature Algorithm: sha256WithRSAEncryption
         81:91:73:70:79:9c:46:07:3c:6d:93:37:31:49:3a:3e:7c:10:
         ec:c3:e6:2a:18:a3:f8:6d:8b:09:cb:6b:0a:20:92:7f:10:a3:
         7c:b5:b0:af:45:f1:98:b4:c8:98:17:50:70:ac:58:a2:ba:03:
         f1:58:ff:82:eb:ca:90:32:20:68:eb:70:b6:87:49:4f:cb:9b:
         77:df:75:68:8c:db:4b:30:5e:09:6d:b6:0e:84:84:0f:38:67:
         9f:7b:1d:bf:10:f7:f6:95:23:d1:be:93:28:20:32:62:67:c4:
         b7:bf:44:dc:e4:94:97:be:c8:08:e2:98:f0:55:85:4a:5a:5a:
         19:3b:a7:b5:a3:28:f7:34:62:e9:73:7c:d2:26:ad:96:85:ce:
         f1:23:69:07:77:20:cf:38:e1:48:87:ca:02:0f:ff:7b:8a:70:
         d9:cc:cc:1e:9e:4a:7d:45:94:22:39:43:2b:ae:cc:da:f0:2d:
         f8:f6:f3:73:13:f5:eb:f7:34:ee:fc:65:f3:8c:83:bc:0e:8f:
         a6:c9:1b:5e:c1:f9:78:89:34:49:0c:d7:e8:c0:97:19:ed:d2:
         0f:a1:c6:c8:b6:ce:77:e4:9a:a1:40:9d:87:3d:0e:0c:6f:ba:
         40:bc:d4:cc:a2:90:bb:42:e8:c2:d0:17:db:36:7d:ed:97:94:
         e0:de:5e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----