Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
File:                     jvjEceg7FPxsbMfPyWwaw-MIfq4.cer (raw, json)
Hash identifier:          4kZT6cp1K78E6MkduYM0HOV0wm8ik0fW2guTM+JsR98=
Subject key identifier:   8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D96D54276AF608D714194D0EF76C8D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216238
                          IP: 2a13:f1c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:6d:54:27:6a:f6:08:d7:14:19:4d:0e:f7:6c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:fe:b1:dc:3a:25:73:d2:4d:9c:41:b1:a1:
                    f6:68:5e:cb:d6:00:ae:03:a6:73:b7:15:20:1b:3c:
                    4d:99:83:aa:c8:b6:c7:f1:50:fb:b8:41:96:98:6c:
                    89:69:89:44:2a:c7:77:ef:21:08:6d:e7:9d:a1:4b:
                    cb:6a:8c:ee:26:bd:96:39:39:19:fe:4a:71:85:77:
                    33:e0:31:af:ae:98:fb:0f:b1:c3:75:e9:96:21:9b:
                    0a:5f:ae:52:c9:fc:90:c4:35:81:d5:08:3b:29:72:
                    d3:8e:c6:ae:5d:d1:de:32:51:f3:99:4d:98:51:b7:
                    3f:93:3b:fb:62:a7:63:c9:ad:bd:3e:71:c9:c9:d0:
                    9c:9c:f6:e7:bb:cc:35:cc:a6:ab:f0:55:05:31:16:
                    47:a3:4d:37:63:21:ab:c0:59:74:62:11:b0:3e:05:
                    9f:ea:fb:45:57:88:9f:5a:93:3e:5f:bf:03:97:0e:
                    12:e1:96:00:e7:bb:e4:43:fb:37:13:57:fd:9a:4d:
                    66:5c:b1:03:82:32:ac:15:5c:9a:04:c3:40:ff:fb:
                    ad:a3:57:72:62:7d:f6:cc:7e:0a:da:0a:a8:cb:dc:
                    f3:ec:46:80:18:8f:ba:d4:b7:34:21:1f:c8:2b:d5:
                    7c:a8:1d:a7:74:b5:a0:5f:36:9d:45:f7:0d:39:3f:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:f1c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216238

    Signature Algorithm: sha256WithRSAEncryption
         54:45:48:86:b5:19:f0:7c:f8:29:94:3f:85:68:49:12:51:30:
         fe:f5:0e:36:bc:fa:2f:d8:ca:8b:b5:48:20:d3:43:19:d1:1d:
         4b:49:6c:f2:e8:8a:9a:81:bf:ca:ae:cf:08:65:19:76:69:9e:
         ef:3d:8c:ab:c6:5f:d3:06:45:bd:ac:40:82:9b:0b:13:06:bb:
         de:91:88:76:96:70:6f:63:d5:1f:d4:13:23:28:b0:a8:1c:07:
         94:f1:77:b2:18:e4:27:2c:0f:ed:90:7b:f3:94:a2:9e:46:21:
         84:13:ee:9b:87:c8:17:8a:67:8c:32:dd:54:a7:8f:be:b8:df:
         c4:6a:bf:62:d8:d3:ab:b1:8d:5e:e4:bf:5e:9d:71:01:1f:d4:
         91:14:2b:6c:c5:b5:bd:85:a5:c2:31:66:fc:f6:73:9e:c1:37:
         e0:50:9b:df:04:85:90:71:f1:af:6c:31:f3:10:7a:42:d7:99:
         59:d1:7f:0e:74:66:c0:1a:58:14:ab:e5:12:c0:3f:7c:8a:31:
         2a:5a:d2:47:f4:be:3f:b8:c8:61:21:0f:24:f4:b0:03:cd:65:
         c5:12:68:1b:5f:49:bf:89:3e:24:38:6a:df:59:1b:92:33:55:
         5a:74:9b:b4:07:3a:0b:ef:32:1d:5c:2e:06:d9:ff:c4:fb:ae:
         86:28:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----