Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
File:                     AnTQhnltTXea0WTCTCI_JrMoTtQ.cer (raw, json)
Hash identifier:          IF4qswn3LaQeLS64YRBL2TiQ3j7lLFM/vrOnjocZjB4=
Subject key identifier:   02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F6914B5EC5B4D3C39EB8D265DE64F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204209
                          IP: 185.249.88.0/22
                          IP: 2a07:fb00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:69:14:b5:ec:5b:4d:3c:39:eb:8d:26:5d:e6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0274d086796d4d779ad164c24c223f26b3284ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:f6:70:6a:54:ae:d6:59:e8:9e:a1:a7:ea:
                    5b:04:b9:29:a1:1e:3b:a3:f0:82:86:f7:bc:10:3f:
                    59:08:cd:a1:cb:dd:e5:11:b7:72:d8:2e:10:ae:05:
                    07:6f:6d:87:24:df:0e:20:54:44:01:01:7f:15:a8:
                    ff:3c:10:32:20:8f:70:90:7f:4c:39:e7:96:0c:19:
                    f3:5f:76:c0:94:2e:b9:7f:d0:49:28:25:e5:ca:34:
                    3d:81:54:05:c3:a6:82:ac:5c:29:41:e8:a5:8d:84:
                    90:9d:ed:e1:d4:df:64:1d:a3:a7:de:95:b8:b6:a0:
                    bd:23:9a:65:24:eb:a8:35:f3:15:14:83:c0:73:fa:
                    4f:de:f3:85:f7:2b:00:17:1b:99:a0:ad:8a:b9:f9:
                    75:d6:f6:47:a4:50:0c:6c:98:c2:80:f1:22:aa:9a:
                    ac:95:e1:b3:2a:9f:24:a8:b5:f1:2a:d1:23:63:e4:
                    e5:70:22:1e:e3:45:72:ac:49:ea:08:af:79:0a:60:
                    23:60:72:fd:ac:a9:91:b8:92:6f:0b:82:01:0b:6b:
                    f7:86:e0:69:ae:dc:e6:df:9f:c4:d1:11:56:a4:1e:
                    23:85:84:3b:d8:27:89:d4:85:10:a0:72:f1:e8:54:
                    24:9a:fe:3c:54:24:fe:ca:05:5c:22:ae:f8:ed:36:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.88.0/22
                IPv6:
                  2a07:fb00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204209

    Signature Algorithm: sha256WithRSAEncryption
         4f:08:55:42:64:f3:6e:6a:6c:5f:35:85:38:27:82:94:fd:55:
         05:4b:cd:51:7a:38:39:9a:b4:43:14:75:eb:07:ff:92:e9:de:
         a8:9c:21:f6:74:c1:a8:cb:76:78:c2:b6:f1:e7:1a:21:8a:17:
         49:bf:0a:6a:ec:58:a6:12:48:b4:77:a7:c5:20:9e:2f:88:43:
         2f:41:c1:6b:a3:18:51:60:58:57:9c:af:6f:a6:54:05:20:a9:
         a8:62:54:68:75:0a:ca:e7:91:76:6b:5a:ec:97:8d:c8:f0:68:
         5f:13:55:ea:92:3d:7a:5a:d2:97:92:fa:a8:a4:8b:98:d5:96:
         7a:c8:2f:70:c9:29:8d:c2:83:0c:83:f3:50:39:19:ea:eb:69:
         0d:82:fb:d7:02:44:90:29:70:2a:cb:5a:7a:5d:7b:bb:30:b0:
         68:97:7b:52:a2:9d:72:c8:79:2d:b2:59:35:cd:a1:e4:75:d2:
         a1:3a:d7:71:3d:4c:d9:75:bd:49:dc:8b:8e:25:67:2d:99:b2:
         d3:ad:16:71:85:62:0b:a9:c9:1f:8e:16:89:b5:60:07:95:57:
         fd:0f:11:86:7d:d5:92:55:e1:8b:b0:96:f1:50:5d:66:72:37:
         fe:e6:3f:48:89:1d:2b:57:1e:f0:be:7b:03:b9:f5:03:4f:2a:
         fe:36:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----