Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
File:                     CFeH5l60_NZuM0C2Kt5HygCRnc4.cer (raw, json)
Hash identifier:          GwmcZQztj+m9gms9OYAD1WYtBPnaDFQgmUUBO+IuMEE=
Subject key identifier:   08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A4409EA5AB63F925B9A8F54AF46B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215602
                          IP: 194.164.244.0/24
                          IP: 2a0c:28c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:44:09:ea:5a:b6:3f:92:5b:9a:8f:54:af:46:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:57:17:48:c0:87:6b:db:26:b3:a4:32:ab:
                    2a:b6:87:8e:b4:24:1d:ec:43:f9:a5:e4:a8:7d:e7:
                    18:f1:c4:1b:44:5c:6c:7f:c0:ec:a5:43:2c:33:d0:
                    bc:f2:7a:6e:be:31:4c:8e:7f:cb:fd:72:43:8f:5d:
                    af:04:fe:09:7c:17:02:44:55:63:56:de:db:07:3b:
                    0c:63:7c:d9:09:a7:ec:d0:9c:8f:0b:9a:ee:1d:7a:
                    c3:9f:78:97:1b:73:ea:6c:e1:d5:59:3c:03:a9:9c:
                    bd:a2:2c:9b:de:1a:74:e1:dc:34:f2:f0:93:de:fc:
                    bd:a7:f1:90:21:ce:26:49:67:4d:b2:4a:fc:b1:8c:
                    ad:49:28:4a:52:e0:db:53:b7:2d:d7:e9:1d:dc:5a:
                    21:81:ac:77:ad:af:f3:6b:fc:39:11:fd:62:3d:10:
                    00:91:91:27:e2:91:0e:53:cb:46:f0:a1:bc:ba:c8:
                    4a:dd:73:52:91:df:9c:03:0c:08:c5:3e:7a:40:b8:
                    e4:ba:96:53:a9:aa:9e:e4:07:c7:5f:c1:2f:b5:21:
                    1a:3a:3f:fb:bb:27:8f:5d:76:ee:4f:fa:b8:f1:d4:
                    86:3f:67:bc:e1:11:3b:2e:c6:c7:12:fe:da:e6:7c:
                    a0:c6:20:c5:70:ad:0a:ca:fb:8b:fb:c7:66:a0:bd:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.164.244.0/24
                IPv6:
                  2a0c:28c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215602

    Signature Algorithm: sha256WithRSAEncryption
         79:ab:6a:bc:d0:54:34:84:c6:99:19:5b:9b:32:16:21:93:5e:
         d0:5b:d2:32:40:eb:a0:7b:03:52:21:dd:29:3b:75:92:86:f2:
         02:4c:9a:f4:61:e0:18:dd:8a:c6:d5:83:3a:37:3a:80:7c:e0:
         bc:b2:4a:8f:6d:73:46:a0:b9:ef:56:78:6c:fc:66:93:d7:76:
         b0:67:9c:52:6a:58:19:14:14:02:af:8a:0f:d3:a5:eb:99:10:
         88:66:8e:ca:6f:b7:76:d7:3a:60:35:e6:9c:62:bb:f6:41:e2:
         ae:09:34:69:0d:bd:3d:7b:77:5c:5e:04:01:12:1c:d5:49:f4:
         43:fa:39:82:6c:1f:d8:f5:e0:18:78:f0:a2:84:11:2b:a5:5c:
         b2:39:c4:58:12:9b:fe:08:12:21:b5:d8:57:82:2c:6b:4f:d0:
         a2:56:c4:4d:37:c3:72:ca:d5:99:06:3d:df:31:92:0b:84:7a:
         40:89:ee:9c:89:c8:29:89:cd:3d:f4:e8:f5:c2:53:fc:72:c3:
         13:8a:5e:11:7c:ae:44:dc:86:08:3b:af:1f:e0:6c:79:2b:12:
         0d:e0:f9:86:1a:ad:55:48:f3:02:ef:96:64:e9:29:4c:c0:de:
         53:24:01:9e:5e:00:92:c8:d5:b6:b4:b1:32:82:a6:12:b8:3c:
         41:d1:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----