Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
File:                     H38fQMjrspNo9ug7-d3QZ14H1O0.cer (raw, json)
Hash identifier:          91zO7x2pmhekGabM8nzkf+rvzV5nK3fqo2KetfyisTg=
Subject key identifier:   1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B2A9B8C6EB1A9175D4B55FE722FED1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:47:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60697
                          IP: 185.24.192.0/22
                          IP: 2a04:1c00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:a9:b8:c6:eb:1a:91:75:d4:b5:5f:e7:22:fe:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f7f1f40c8ebb29368f6e83bf9ddd0675e07d4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:fd:e4:21:ac:e2:ce:28:d1:d8:69:7a:f9:
                    74:0a:4b:9d:c0:0c:c0:0f:06:67:8c:5e:ac:04:02:
                    71:5b:06:3c:b4:2a:c8:7d:a5:1d:87:27:6b:9b:1e:
                    32:d3:ca:6e:90:77:f9:35:a6:4d:9f:92:ff:42:4c:
                    96:49:84:25:96:28:98:af:d3:d1:71:b0:90:e8:42:
                    87:be:06:b0:19:b3:06:39:6c:21:41:ad:25:74:4b:
                    f3:eb:c5:72:ec:b4:83:77:7c:2d:5d:08:ee:f0:dd:
                    c2:18:8e:ca:60:4b:c4:09:d0:da:d7:21:14:0c:20:
                    ea:48:a4:0b:98:37:2d:40:a9:28:f7:56:0b:0d:aa:
                    b0:05:a9:f6:1a:10:bc:87:ae:33:d0:b4:9e:13:a2:
                    39:41:d8:ed:2e:81:8f:65:93:c3:6e:e5:20:d2:c4:
                    30:57:ff:4d:a4:51:8a:1e:1d:3a:fb:68:de:6e:80:
                    79:3b:3f:18:4d:b3:72:11:3c:35:b2:a1:88:36:b6:
                    81:35:d9:82:6d:cd:4a:62:ed:92:37:72:7f:e9:35:
                    4e:5a:33:a4:dd:dc:07:e4:30:d5:84:1e:f4:b0:eb:
                    48:cb:b5:9d:4b:1a:17:ba:a5:c2:19:1e:ce:f9:70:
                    3b:44:9d:1f:e8:b8:8a:c2:3e:3a:32:d2:7e:68:a5:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.24.192.0/22
                IPv6:
                  2a04:1c00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60697

    Signature Algorithm: sha256WithRSAEncryption
         3b:a3:ca:53:08:b2:40:22:43:cb:70:e6:02:a6:69:0d:c9:45:
         83:51:47:b4:33:1c:61:4a:5c:ee:ce:b9:f5:2c:ae:30:ef:3a:
         22:79:5b:e6:b7:9e:53:3e:b4:90:53:42:64:54:76:4f:9c:fe:
         cb:1b:b2:94:4a:c6:57:08:48:5b:02:ab:f9:09:1b:29:9e:0e:
         d7:a9:cf:98:12:b7:c7:15:3e:f9:20:34:1a:3c:99:2e:0a:4c:
         fd:7c:73:fa:3d:36:93:50:ac:b6:c3:09:bf:90:52:5a:fb:01:
         c3:c5:f2:1e:d8:21:5f:41:ff:b0:f7:92:5c:9a:b1:d9:a3:51:
         d5:f6:62:5e:bf:a8:e5:ac:13:68:05:28:90:08:31:09:18:16:
         09:3a:ef:48:80:ca:89:77:dd:3d:14:73:a8:53:ca:14:08:71:
         87:ca:76:f3:78:d0:29:97:e0:01:f7:8c:22:3c:cd:4e:cd:9f:
         d7:bc:38:b5:c3:82:1d:2a:fd:31:2f:15:19:8f:73:71:b4:80:
         fb:97:b2:5c:ec:b3:ac:42:02:e9:cc:8a:57:74:5e:5a:85:6a:
         35:45:c5:30:50:b4:4f:93:cd:34:68:f4:ea:61:f5:98:04:dd:
         b8:78:6e:b6:25:d1:f9:e3:75:a4:4b:c3:d9:3d:82:30:b3:57:
         05:ae:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----