Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.cer (raw, json)
Hash identifier:          b8FPCwVQL7ff9yCnFojTpbpS18m8PSJtrI8cL8BA7NA=
Subject key identifier:   9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B544C059C2F26DE0F6D348C4A0F380
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203265
                          IP: 185.54.32.0/22
                          IP: 2a02:2fe0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:44:c0:59:c2:f2:6d:e0:f6:d3:48:c4:a0:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:33:67:8a:96:77:54:c7:9f:fb:c7:38:b8:
                    a8:22:cb:0a:a7:11:fb:65:8f:0a:67:0f:38:91:5b:
                    fb:ce:67:b8:da:3c:32:ad:ba:21:19:2a:64:91:37:
                    33:55:14:c2:2f:44:19:c7:95:87:e8:a4:c9:1f:a7:
                    d7:3d:ff:17:27:32:e8:2d:71:44:e7:36:e2:45:69:
                    c1:6f:0e:fa:73:50:90:d2:17:95:d5:ab:e0:d0:ce:
                    c8:8d:7c:df:82:9d:43:84:e3:1c:d4:d0:ff:a7:0a:
                    32:54:16:5b:13:f9:71:20:c8:cf:31:84:0f:2e:af:
                    4c:5d:ba:99:d5:44:aa:c8:41:b5:d5:3c:94:68:a1:
                    f1:a5:14:e8:f3:64:84:fe:df:cb:19:ee:c8:78:6d:
                    38:1a:fd:42:3c:ea:ab:84:19:91:fd:8e:df:cb:54:
                    ed:8d:08:64:50:00:0e:e5:88:dd:d0:b5:6f:24:89:
                    61:e8:8f:fa:d3:93:3a:ee:d1:3c:73:3f:d8:fb:eb:
                    5c:44:a7:fd:ec:6d:79:e9:75:cd:70:a4:7e:fa:4e:
                    19:30:57:29:58:42:d2:8e:d9:c3:a2:b7:e3:ef:c1:
                    1b:43:09:a0:71:14:c5:ce:1f:dd:98:8e:50:f6:7d:
                    07:af:a5:50:57:84:a3:61:03:03:17:fc:b7:9d:09:
                    84:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.32.0/22
                IPv6:
                  2a02:2fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203265

    Signature Algorithm: sha256WithRSAEncryption
         02:39:45:93:17:e2:d8:cf:35:04:db:7b:33:b1:c3:07:d1:e9:
         8e:69:65:3e:95:9e:e0:54:19:ee:ad:7d:82:6d:bd:fc:d9:e1:
         b8:8a:9e:08:20:65:ad:8b:26:87:ec:41:fc:47:c2:72:38:21:
         a5:9b:11:8a:27:a7:cd:69:6a:7e:78:3d:e2:90:01:11:cc:bf:
         26:a4:27:5f:fc:25:68:00:e4:a7:25:d0:30:d8:d3:25:63:2b:
         0f:31:85:61:d8:7a:da:80:0b:ed:4d:2e:54:3e:51:3e:ad:e1:
         7b:56:ce:64:c2:84:e7:e5:3a:c7:ce:10:49:50:e7:4a:91:a6:
         56:70:49:84:12:3a:63:2b:1f:d6:23:c9:13:c5:0e:4c:68:65:
         37:2f:42:d8:30:61:87:77:8a:db:b2:4d:e2:b9:2f:3d:51:0b:
         cb:c8:df:1d:ff:22:c8:b4:7d:34:b5:e3:a6:da:13:7a:81:d3:
         60:04:33:20:e2:80:59:f1:06:5f:0f:a4:2e:d3:ad:c6:1a:40:
         ab:71:41:90:66:d2:22:17:f4:16:4f:19:a2:76:f3:f9:0c:66:
         2d:9b:cf:f3:9f:2e:9c:9b:92:77:a9:7e:0e:09:8b:76:38:b7:
         be:88:2e:18:9a:e3:51:18:d6:77:ba:59:f3:49:de:ef:7b:48:
         04:c9:32:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----