Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
File:                     MHbphV-byjAXoQE3tEPujFKMqVI.cer (raw, json)
Hash identifier:          W5uFtmHFbcVlGN5hQYupwpyWOmQuuEb1mbkqSWcDvC0=
Subject key identifier:   30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C00EE3C4BD2F5630935067D2B35A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206539
                          IP: 95.169.64.0/19
                          IP: 2a0b:5580::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:00:ee:3c:4b:d2:f5:63:09:35:06:7d:2b:35:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:81:0f:e7:4d:2c:a5:35:ed:46:28:fd:55:71:
                    ad:b5:06:4f:ef:0a:44:9f:c1:23:b2:ec:74:5d:89:
                    52:89:ca:41:91:e5:00:e1:8d:84:0a:23:8d:7f:5f:
                    bc:cc:dc:97:40:17:da:ee:b3:a8:18:25:57:1e:1e:
                    3c:e5:af:9c:e4:98:3f:f7:05:b3:74:b5:43:db:85:
                    d6:2e:ea:ca:15:16:53:06:a3:66:54:05:ff:af:1e:
                    d0:8e:74:21:81:ca:fe:52:cb:97:e4:aa:c8:8f:59:
                    ad:b9:48:d8:02:c7:bc:12:4a:ef:31:89:b8:6f:36:
                    68:a4:7b:a8:b3:f1:13:bd:87:73:e3:49:5e:16:88:
                    f8:4a:66:96:93:db:b2:41:25:b8:41:3b:82:11:c2:
                    81:fd:af:d5:54:41:e9:17:7c:1b:29:35:44:27:6f:
                    a5:ba:61:d1:28:5b:26:e1:ca:b5:ac:fa:65:c1:1a:
                    c6:4f:aa:53:a7:3f:a2:47:9d:5c:b2:f1:ec:96:60:
                    fb:d2:cf:7e:c1:eb:0e:d8:f8:5a:09:3e:3e:0d:bc:
                    a7:d2:44:00:f0:64:47:04:73:af:2f:5a:3c:9d:d9:
                    47:4c:8d:c2:36:8f:a9:17:76:1c:86:2f:ba:59:46:
                    7f:9e:b2:e0:c2:ac:a8:68:29:a8:32:9f:4b:2f:36:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.64.0/19
                IPv6:
                  2a0b:5580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206539

    Signature Algorithm: sha256WithRSAEncryption
         17:a3:9f:2b:be:2b:b3:76:a1:59:eb:b2:e2:67:72:33:f6:b2:
         dd:1c:d8:74:e3:a5:75:31:d6:38:43:b4:4b:04:76:d4:dc:0b:
         71:97:89:60:5e:2e:e8:d0:01:ae:ba:0b:99:0c:eb:99:5d:ec:
         a0:37:7e:43:65:24:bb:5b:da:24:c4:d5:51:47:cf:26:f6:de:
         95:bf:61:b1:62:00:03:34:74:1f:74:8c:b0:24:b8:4c:e5:0e:
         91:2c:49:3d:6f:dc:2d:7e:a0:22:41:fc:5f:7d:5d:7a:ca:17:
         6b:99:eb:3b:4d:e3:c5:64:42:ac:60:63:d0:b1:a7:96:c3:e9:
         02:fa:6e:c3:05:b0:c7:ec:0a:c2:d1:72:18:35:6b:b8:49:0f:
         f1:9b:22:d2:8c:e5:ea:b3:46:2a:92:eb:58:1c:dc:b9:66:09:
         65:5c:7c:ca:8f:41:6b:75:48:4d:70:e7:19:98:6c:dc:08:dc:
         8a:51:49:99:e5:3b:f5:f7:7a:49:59:d9:f1:dd:cd:a1:b1:c3:
         26:74:4e:44:92:ba:31:b5:ae:b3:de:f0:82:cd:af:3f:e1:78:
         41:f5:35:23:27:71:f9:ad:c6:95:ac:85:cc:00:34:74:8c:ae:
         b0:43:e2:ba:5d:56:63:72:75:63:d1:64:a7:18:91:c3:dd:f6:
         af:9d:89:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----