Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
File:                     Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer (raw, json)
Hash identifier:          yTQsyc+rlD5sVcuwyXC5vGAEuTv2CxccwsEpfWGIP84=
Subject key identifier:   1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC2BDF31A478B0AE9FF40F27B756F3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203520
                          IP: 185.16.196.0/22
                          IP: 2a03:dfc0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:2b:df:31:a4:78:b0:ae:9f:f4:0f:27:b7:56:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:ad:33:f3:88:3a:2a:15:e2:ff:bd:84:95:
                    a9:8b:ec:5f:b5:e1:23:de:7e:35:8e:a3:64:1c:4c:
                    56:79:13:ab:8a:03:39:26:d9:01:b1:5a:41:1f:50:
                    f3:0a:f9:ef:03:86:de:7c:82:4f:11:57:c6:52:41:
                    83:fb:66:2b:b9:63:40:dc:96:eb:59:96:a2:75:37:
                    57:b1:9b:f7:61:e9:fb:dc:bf:66:82:8c:28:5d:69:
                    18:be:3b:55:d4:01:9d:64:e6:a7:23:04:4d:b3:77:
                    7a:2e:90:f8:8b:29:67:1e:5d:33:71:75:89:de:9a:
                    fe:d4:ad:57:9c:50:b1:ae:6c:2a:73:b8:3f:94:c2:
                    ec:84:dc:15:f3:25:6f:53:3c:22:af:b8:8a:83:1d:
                    09:ad:7c:65:89:a4:97:b5:26:01:c8:5e:ed:3c:77:
                    78:c9:78:52:5f:ac:1c:88:78:6e:11:f3:e6:60:ed:
                    f4:d5:fc:8f:0c:34:85:fd:3f:33:77:b6:68:72:ce:
                    87:04:b7:e1:a2:1c:e7:d3:ff:36:d8:b2:a6:1f:48:
                    90:6e:3a:95:90:d3:8c:21:be:3d:41:94:78:bd:cb:
                    b5:78:df:ac:2d:b3:bb:bc:51:73:86:e7:dd:2a:26:
                    01:40:4c:cb:a8:28:9e:6c:92:e5:7a:4d:34:4f:13:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.16.196.0/22
                IPv6:
                  2a03:dfc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203520

    Signature Algorithm: sha256WithRSAEncryption
         63:78:44:d8:9d:21:7f:5c:a6:40:22:71:4d:42:ed:a0:74:2c:
         9c:1a:13:d9:53:7c:c9:83:7d:b9:96:4a:65:33:1e:c2:83:ea:
         36:30:71:83:35:6f:d0:ab:15:fc:d8:a1:16:6f:72:04:6f:29:
         4b:32:cf:3f:94:01:d8:18:67:e6:57:6b:3c:2f:7d:2d:9d:54:
         24:2a:ef:5e:2b:14:be:d7:64:6e:d8:e1:07:4a:93:ab:72:eb:
         33:88:fc:54:89:34:27:74:69:6a:1b:4d:fe:f9:3f:3c:5c:85:
         39:e0:40:7d:c1:2c:71:44:b7:b6:d4:70:b6:c1:78:09:71:9b:
         e6:3b:d3:b6:b1:59:66:28:68:46:ee:ef:8a:b8:f7:80:73:ab:
         35:96:6f:ca:49:63:83:f0:f0:a7:46:e2:51:9c:c0:ef:4f:21:
         9d:8d:08:a5:91:13:d2:89:5c:c7:7b:26:75:b7:34:17:7e:e0:
         8e:1c:b3:5c:34:15:2c:5b:fd:c4:d0:57:06:30:a0:e9:6c:9f:
         f0:7e:12:23:ef:98:12:58:97:21:c3:89:d5:0d:aa:2d:5f:8b:
         74:83:87:8f:4d:a5:a0:d3:2d:ca:6e:f0:8a:a0:28:15:63:19:
         21:3e:1f:cf:9b:00:91:59:ab:47:5b:52:8f:43:c9:18:4b:76:
         04:e4:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----