Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
File:                     i42FmAZNtajts6YIQGTNKhrYxuM.cer (raw, json)
Hash identifier:          yMkpj6qQF4izenRBTJyJsSQhCP3hsFW5BtSMXBisaYI=
Subject key identifier:   8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420685C15B804336966F7FFD6C31CD8C8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51801
                          IP: 95.141.248.0/24
                          IP: 2a13:4880::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:5c:15:b8:04:33:69:66:f7:ff:d6:c3:1c:d8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:14:1b:1e:c4:ce:d0:fa:29:6c:04:1d:bb:
                    c2:cb:6d:94:71:c4:c2:77:e3:5f:c2:89:62:13:92:
                    e2:d5:ee:02:4b:7a:41:27:58:85:4c:18:67:fa:22:
                    ae:76:21:c8:8e:f5:42:51:02:54:7b:b1:c7:a1:bf:
                    95:94:22:bd:04:4e:46:9a:18:82:9f:36:85:f7:8a:
                    bf:71:27:28:0a:80:16:d1:9a:06:2e:2f:41:91:26:
                    2e:8f:c2:1c:78:54:ed:36:3a:73:ff:89:25:7a:c9:
                    9d:d7:6a:3f:4d:9c:06:fd:bb:98:90:d7:9d:fa:fb:
                    04:33:ed:b3:82:8b:60:12:ef:d9:55:37:58:ad:c7:
                    8d:fd:23:9f:da:82:95:e5:00:1d:30:b5:0c:ef:4d:
                    30:73:ee:0c:cb:0b:72:c3:49:08:86:13:bf:dd:34:
                    16:ef:63:dd:e7:cb:92:92:e2:fe:57:c0:c0:79:60:
                    fa:15:c8:87:22:f1:1c:42:2a:ed:8b:04:fe:dc:fb:
                    18:1a:e5:79:8e:22:7f:dc:a8:b3:2e:4b:d7:7b:04:
                    11:86:3c:c1:21:92:93:91:d1:a9:d2:a5:8f:34:c3:
                    50:a0:ea:5b:97:d8:fc:60:97:ab:d6:14:cd:8e:f7:
                    7e:93:03:72:8c:3d:bc:14:22:ba:b7:27:ce:a5:75:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.141.248.0/24
                IPv6:
                  2a13:4880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51801

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:00:b8:39:ef:ef:a0:68:ea:ad:33:42:5f:1b:3b:62:67:
         58:3c:62:ad:f7:23:a7:dd:f9:73:ca:70:69:51:a2:35:51:28:
         77:a4:48:9b:19:71:26:c5:e6:24:be:bd:de:aa:8e:a9:b6:c7:
         fb:6c:e1:15:9f:1d:6f:9e:87:33:a1:3c:96:e7:63:c1:4d:33:
         92:78:76:85:c0:9b:1a:ce:23:28:15:18:35:8f:10:f7:91:07:
         39:13:98:1f:99:df:2d:84:eb:93:e1:54:d6:9f:41:9a:1c:bc:
         65:1a:e7:df:9a:dd:c4:2f:6a:e4:6f:4c:0c:8e:2b:06:9e:6c:
         32:59:d5:13:4b:0d:f5:69:e2:bb:79:16:b5:e6:08:4d:50:9d:
         ae:97:3b:d1:cc:c8:f1:f0:b8:b3:58:ce:c2:1a:20:bd:35:6c:
         3c:0c:45:4c:2b:08:dd:f3:4b:2e:d0:e8:62:bd:1d:9c:3a:d6:
         da:1c:f7:db:c9:90:8e:cd:ca:12:45:1b:22:bb:91:b0:a1:e0:
         0b:14:48:b7:3c:74:5c:18:2f:d4:ff:76:c1:9f:81:64:f4:d5:
         4c:26:39:0c:34:c8:e7:31:28:0c:1d:19:b8:28:bd:09:bf:42:
         2b:96:bd:ac:2b:a5:71:f0:72:a2:36:77:79:9a:91:ea:dc:d4:
         6b:2b:77:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----