Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
File:                     hI2YANad664Rt_gWHDzogYH957Q.cer (raw, json)
Hash identifier:          D5bDTqXLEtnt+EqDQ3T+slBusjQwOWXzFv5EQX1rXxU=
Subject key identifier:   84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424449EE0F04DF94A8EDF60BE70A2D4A1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204862
                          IP: 185.237.168.0/22
                          IP: 2a0c:1980::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:9e:e0:f0:4d:f9:4a:8e:df:60:be:70:a2:d4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:ae:0d:8a:61:55:0f:37:81:59:f0:97:75:
                    39:e3:87:ec:8a:bf:3c:da:d2:f5:3f:1c:f3:ab:17:
                    0c:2f:b4:74:a8:d7:c4:74:15:b0:7c:f1:5d:40:b1:
                    18:9a:31:c0:be:8a:be:ac:4c:e4:c3:ff:50:31:a4:
                    88:77:4b:f3:f2:83:1c:95:75:34:35:54:72:5e:a1:
                    f0:c7:85:b5:c0:29:1d:46:0e:d3:22:92:2c:ff:d3:
                    c3:c3:08:ab:8c:38:c2:58:fb:37:19:37:37:73:20:
                    6b:6c:dc:ba:e1:f2:c0:cd:a2:ef:ee:c2:39:6f:8a:
                    32:6c:06:7d:04:8c:87:8c:b7:9a:48:ba:31:9b:74:
                    8a:63:9d:3a:0d:8c:68:bd:32:1d:12:0b:ad:16:51:
                    50:98:27:f9:e6:0b:e5:35:35:b4:fa:ec:d8:f2:e8:
                    73:9f:00:25:54:5b:b2:ca:d3:78:57:6f:19:dd:0d:
                    b6:a3:42:44:2e:0c:b8:ff:0c:54:f6:f5:8e:d6:2f:
                    fc:52:11:09:e1:5a:82:27:83:f6:85:28:49:32:b6:
                    4c:dd:1c:8f:4d:26:ac:d6:d1:7f:57:23:76:ba:6c:
                    47:0b:21:46:16:06:51:dd:f2:d8:f5:c4:30:e0:b5:
                    b3:bb:ff:9f:28:06:0c:d2:20:e6:9c:a2:33:66:22:
                    25:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.168.0/22
                IPv6:
                  2a0c:1980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204862

    Signature Algorithm: sha256WithRSAEncryption
         4f:31:48:e1:b6:0b:43:9c:90:a7:10:9e:5d:13:bc:e2:d0:c0:
         5d:f4:b9:a7:ae:ee:33:95:2a:12:c2:0f:1b:87:27:e4:38:5b:
         d2:5d:3e:37:cb:a6:da:b4:96:ce:03:dc:43:55:1b:e6:39:8f:
         d9:6f:be:6b:a2:01:0b:c7:55:59:08:31:b9:72:0c:82:02:b6:
         8a:eb:03:07:4b:bf:b1:89:d2:ea:58:58:b7:23:64:af:84:61:
         ec:27:10:af:2d:3e:3e:1f:e8:cb:95:a8:0d:05:5c:38:31:65:
         e7:6b:66:3c:7d:60:52:93:82:34:db:08:d7:89:80:98:1f:ea:
         8b:a3:1a:89:8d:fd:34:00:29:71:3c:1c:1a:79:5b:32:0d:5f:
         bd:f5:6e:5b:26:c4:02:1e:44:3d:1a:e3:be:1a:83:f6:b0:5f:
         7a:23:1e:ac:21:cd:df:71:a7:d7:56:51:34:62:6d:9a:18:55:
         e9:c2:d9:c3:f6:0f:ad:6f:cf:d0:9f:61:6b:5c:87:13:b1:6e:
         19:69:d0:e5:73:08:b9:ec:1b:ef:97:d3:f4:bf:23:f0:6e:8d:
         19:5d:98:3f:e9:0f:ec:be:ae:35:e9:f1:4b:35:2e:36:82:55:
         28:b4:eb:5d:7b:cc:ef:8b:8b:cb:ed:d3:c2:04:86:21:72:e1:
         7f:e5:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----