Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
File:                     iW1QqxLax1eoUX-YnnMXJVoUfFA.cer (raw, json)
Hash identifier:          jj1ADWghFRzBSALHCjuOPcVUq07CQb9YoizqQLv42UQ=
Subject key identifier:   89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA125424664A0A2E30DF5536593623
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204916
                          IP: 194.53.175.0/24
                          IP: 2a05:53c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:12:54:24:66:4a:0a:2e:30:df:55:36:59:36:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=896d50ab12dac757a8517f989e7317255a147c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:09:47:78:df:84:ad:7f:a6:2f:3c:91:53:
                    e0:3d:87:73:be:4f:e0:23:fc:61:01:61:81:5d:ee:
                    be:74:80:00:c3:18:91:70:46:8d:1b:2d:d9:68:2b:
                    58:15:bc:32:7e:8a:b2:ad:a3:51:cc:d2:f7:5d:e3:
                    14:2c:50:5c:1e:dc:65:57:bd:80:0d:b9:41:9d:51:
                    8b:d0:8f:64:2c:02:83:19:e0:36:bf:ce:92:d3:7a:
                    5f:d5:0d:a4:12:27:3e:12:ed:40:6a:1b:62:83:03:
                    33:ee:69:6c:54:a0:cb:f9:2c:e5:09:e1:17:06:99:
                    ad:59:a6:7d:94:f2:82:97:8d:21:9f:54:b4:b6:b4:
                    aa:1b:94:82:d1:e1:10:6e:ae:c5:fd:5e:65:55:5d:
                    e5:c0:8c:d4:71:42:62:7c:68:23:1a:78:e1:b0:0f:
                    21:52:eb:c8:2c:26:1f:1e:bc:34:d0:7d:5a:58:ba:
                    81:33:38:a9:ec:53:8b:e1:aa:7d:c9:01:a4:f6:80:
                    ae:f1:2c:ba:2e:56:e1:60:8b:32:fc:e2:6e:c4:dc:
                    1f:58:96:73:fd:60:f9:c2:7f:83:f0:d1:d7:ec:04:
                    b7:80:d8:69:c4:22:24:ca:4a:13:7d:f3:c7:6a:bd:
                    05:5d:cc:7b:aa:2e:b5:70:ad:a1:c6:e4:b4:93:45:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.53.175.0/24
                IPv6:
                  2a05:53c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204916

    Signature Algorithm: sha256WithRSAEncryption
         49:17:ed:9a:21:9d:67:8a:d2:5d:cf:e0:97:a1:01:83:f6:89:
         92:20:e1:9b:b3:55:c2:af:7a:99:a3:1f:69:ef:68:8e:6a:10:
         41:3e:dd:3a:39:fd:40:36:9d:4c:82:eb:86:14:34:6f:f9:94:
         2a:6d:99:eb:e3:a8:5b:70:1f:9c:65:8b:df:5a:46:4e:68:ee:
         cb:e1:8b:d4:5f:80:20:62:dc:b2:6e:8c:86:58:c9:16:9b:ac:
         b8:c5:e5:ef:c7:54:2a:67:ad:d8:d7:78:78:ec:f6:7a:05:b1:
         91:a8:f1:bb:43:68:b1:c3:cb:a3:2c:b7:7c:13:85:e2:5c:39:
         35:28:d4:0b:55:99:53:24:23:e8:4d:89:70:36:ab:fb:58:56:
         b6:22:8b:61:06:17:16:35:0f:5b:65:33:1b:05:a0:51:13:f5:
         e2:08:d4:fe:dd:46:c5:5c:3f:7d:5c:ad:33:0a:43:f2:36:69:
         17:0c:f1:83:c4:67:1e:95:8c:42:5a:14:47:57:30:8f:73:0d:
         05:d9:78:8c:b8:9e:ca:4c:b6:36:ec:ea:67:2b:5c:61:76:5a:
         9e:f4:60:ed:00:f2:31:bf:6d:68:23:33:67:dc:0d:5c:0f:27:
         e1:12:fa:4f:7d:15:6b:97:39:c1:87:c1:a9:15:a6:ad:f7:33:
         ea:11:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----