Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
File:                     4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer (raw, json)
Hash identifier:          yMTsahxCZzVGbnPDwJbCA/yZaCnrF5n27Ff7/SbMb3g=
Subject key identifier:   E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B9E8E4E4A8433263FE8A2F399F5B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202211
                          IP: 185.69.252.0/22
                          IP: 2a03:3120::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:9e:8e:4e:4a:84:33:26:3f:e8:a2:f3:99:f5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:f3:f0:c7:4f:60:1c:5d:8b:fd:da:43:1a:
                    09:a6:78:1d:64:d0:25:eb:01:3e:aa:e6:1a:37:43:
                    b4:a4:9d:d1:4c:b0:04:a7:e5:64:d9:74:d9:60:b2:
                    fc:01:00:a9:7d:ce:09:a3:03:f5:7c:7a:5a:d4:0e:
                    e7:df:e7:d1:d7:b7:00:d9:2e:b5:7f:ce:9f:31:04:
                    a6:d7:8c:81:17:8b:6e:22:da:11:31:09:62:06:f8:
                    5b:f9:1d:5e:59:ab:a2:b9:4e:8a:55:74:f7:d8:ac:
                    84:55:c9:10:ee:58:7c:5b:48:c2:17:4b:66:b5:fb:
                    36:a9:de:93:b4:b4:b3:46:58:6f:e0:d8:5b:58:42:
                    59:da:d9:c4:a3:23:6c:7b:6f:3e:f6:8c:9a:f9:48:
                    fc:43:e3:2c:68:19:0c:b8:8e:09:6a:98:bc:4d:5e:
                    5f:9c:11:65:32:b4:61:42:67:51:28:ee:2f:b8:16:
                    8f:66:d1:55:45:91:84:6b:38:14:da:bd:30:43:90:
                    c2:24:92:4a:7c:81:d3:2c:c9:8e:76:28:3c:89:3a:
                    d7:03:5a:59:4a:28:59:cd:26:7f:f9:4f:8e:b9:35:
                    9e:63:b6:37:c0:7a:1b:66:c5:e2:d1:c5:12:c9:d6:
                    f4:21:d9:c0:25:aa:e9:d9:68:99:3d:35:e3:70:26:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.252.0/22
                IPv6:
                  2a03:3120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202211

    Signature Algorithm: sha256WithRSAEncryption
         22:da:a5:7f:47:3a:cf:d4:63:2b:22:2e:d6:1c:0d:19:aa:5a:
         57:52:c0:0c:22:36:1d:f0:fc:bc:bd:14:6b:a4:28:9a:35:b2:
         47:77:83:4f:13:3d:33:13:7a:6d:ed:35:4b:7f:b0:ce:e0:d7:
         ad:d3:39:42:a7:e2:55:5e:35:e3:c2:0e:b6:53:16:8a:1f:38:
         d5:aa:16:4f:48:58:92:f7:1a:b6:57:19:1e:a8:9e:80:9d:50:
         08:b7:87:19:84:9f:b3:53:8c:85:cd:0c:5c:30:3b:25:b4:fb:
         9f:84:39:7b:1a:1b:0c:74:e2:5a:3b:58:a6:f1:61:bf:83:9f:
         a6:c3:69:70:81:67:37:16:08:ce:b0:63:c3:70:0f:f7:aa:68:
         48:ba:42:46:d7:b4:c5:1d:ad:0c:32:ec:11:52:5d:c3:5b:c8:
         9b:d8:63:d3:1e:e3:70:fe:54:3f:bb:26:f2:d5:91:aa:e7:79:
         81:7b:e6:4c:70:00:12:02:09:a6:60:ed:44:50:ea:3c:ec:f8:
         c6:36:fd:9c:52:9b:73:63:b2:97:23:0b:27:8f:bf:dd:ec:75:
         97:a3:e3:d1:1e:1b:0d:52:a8:67:2c:9c:02:9c:25:30:ee:92:
         b7:dc:5a:b1:6a:c3:84:65:31:f4:ae:20:37:17:22:f0:94:da:
         6e:55:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----