Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
File:                     1jND98xsI32j-LgROMBR2Pk8nE0.cer (raw, json)
Hash identifier:          CUShizk5fwDWNxlnkiqAezgRIPupDON6vht3+Feme+w=
Subject key identifier:   D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F6FFCF85FBC566746721B16732BEC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209379
                          IP: 185.203.200.0/22
                          IP: 2a0a:edc0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:6f:fc:f8:5f:bc:56:67:46:72:1b:16:73:2b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:88:5a:83:ee:da:3d:68:a9:92:22:34:70:
                    8b:5d:86:3f:af:c6:5e:46:5d:e2:24:14:4b:03:bb:
                    74:32:ad:0d:56:c3:09:41:db:93:27:51:f1:be:4b:
                    df:73:9c:84:29:a9:c9:26:3b:e1:01:56:5a:e2:eb:
                    39:b8:22:5b:81:89:c2:37:65:ff:93:41:e2:27:85:
                    4a:d8:ab:5b:96:5c:8e:04:5c:e1:f4:af:28:a4:c5:
                    05:62:a2:70:94:5e:aa:cc:0f:1e:8a:87:a4:1c:f3:
                    b9:c5:fc:a7:68:e7:c9:a5:61:45:fd:31:49:4b:0c:
                    6c:64:cd:37:1e:f1:2b:11:a8:d1:51:ea:d7:52:20:
                    01:26:ba:b8:b7:3f:a4:ec:94:e1:a1:e4:53:cf:07:
                    18:fa:4a:3f:d0:ec:51:0c:cd:92:c5:62:23:3f:57:
                    ad:8b:af:f6:92:87:7d:f8:aa:76:7f:08:e4:1f:0b:
                    a4:05:c6:d3:22:38:b8:28:e4:8f:d4:31:57:10:50:
                    3a:ae:ff:f2:be:dc:c5:ab:bb:75:bc:30:7c:37:14:
                    64:a0:a8:c6:d0:4c:fb:d0:15:e6:ed:19:f5:bf:c7:
                    1f:68:8e:09:1d:2c:c8:a1:02:9f:df:74:21:fa:29:
                    1e:61:a8:d0:de:f9:63:9e:dd:ea:1f:88:7c:99:93:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.200.0/22
                IPv6:
                  2a0a:edc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209379

    Signature Algorithm: sha256WithRSAEncryption
         7e:ea:62:a1:f9:fe:ec:f3:04:02:b8:96:83:47:83:5c:9d:76:
         4f:c9:c6:17:17:f5:30:6c:13:75:22:3e:06:29:da:ca:2a:ca:
         ac:93:bd:e4:75:bb:06:72:73:88:dd:1b:bd:0b:75:b1:d1:d7:
         a9:e3:2c:38:27:40:14:d5:13:1d:88:1e:cf:98:52:9a:76:49:
         65:30:55:ef:76:04:76:e8:c7:f3:d2:03:5c:bb:90:b6:3b:63:
         2e:bf:89:12:6c:00:3f:13:07:48:61:f0:a8:89:fd:4e:f5:4a:
         65:cd:46:8a:ca:31:67:61:c1:4c:92:41:92:f6:1f:93:1d:76:
         2e:98:64:4c:e4:78:82:b7:97:f7:60:31:f1:5b:81:a6:08:ae:
         13:48:62:31:d9:90:c3:44:32:d1:d2:86:7a:30:00:45:84:a4:
         61:44:0e:76:2a:7e:8f:30:ae:f1:57:6d:6f:2b:92:9b:69:ea:
         4a:7b:73:7a:37:c4:29:6f:ce:c7:62:0f:ae:2b:3b:94:39:a6:
         fb:e7:6d:25:63:3a:d3:a9:14:c0:c0:74:80:79:64:57:b6:f9:
         44:6e:c9:c2:10:c9:b0:06:d5:0e:28:c2:83:d1:6b:67:7a:23:
         d3:16:8a:4c:bd:9c:21:3e:23:b1:b4:31:2b:51:54:6a:da:17:
         65:98:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----