Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
File:                     ln4P5z7udZt3H7cgI8VKecCmFxc.cer (raw, json)
Hash identifier:          V2H4lPtqCTyOWZEE/rjhAfHT/Rb5hvl7uVT8utLmQ/8=
Subject key identifier:   96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B25823F5A51538FA8EDADFCF9ACE05
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:47:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49551
                          IP: 91.214.220.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:58:23:f5:a5:15:38:fa:8e:da:df:cf:9a:ce:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=967e0fe73eee759b771fb72023c54a79c0a61717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:43:77:7b:b8:d2:a4:b8:29:3b:b7:c4:89:
                    bb:f9:87:05:b5:f1:c4:bd:12:59:27:d6:8e:74:5b:
                    e8:d5:e1:ff:03:73:6f:01:b4:cd:fb:b0:06:b6:93:
                    bb:bc:9b:fe:74:05:27:a4:01:ef:5d:15:91:30:6a:
                    0a:fa:a2:a8:71:7c:f2:de:4a:9b:bb:5d:f6:85:0b:
                    e1:40:a6:ed:80:66:f9:75:62:bd:86:b5:28:16:a4:
                    89:b9:91:11:28:91:d7:29:1a:67:47:4c:3a:e7:f3:
                    e5:e6:53:90:e8:4d:22:3c:49:b9:72:94:44:b3:df:
                    43:50:30:17:fb:1d:ba:11:52:fd:a8:68:14:a3:65:
                    e6:ff:ed:c3:2e:26:e4:64:54:56:4c:ac:57:c9:04:
                    9e:e2:59:17:20:e5:fc:6a:58:55:90:3b:6c:2d:f0:
                    52:4c:2f:e0:25:5e:0a:83:07:d6:63:c1:c4:03:9f:
                    7d:c5:97:09:e5:fe:60:84:3f:0e:01:e1:b4:d1:60:
                    f6:74:c7:87:af:18:58:f0:69:f5:25:3c:af:fb:32:
                    ad:d3:2f:7a:37:8a:96:e4:75:4c:1e:6f:05:73:1b:
                    57:08:53:a1:84:75:ff:0b:4d:9b:ac:08:6c:41:34:
                    3a:02:f1:00:16:cb:23:3c:c7:fb:e4:82:45:72:6e:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.220.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49551

    Signature Algorithm: sha256WithRSAEncryption
         71:6e:60:df:fd:ad:0b:91:8f:66:8b:81:ed:f4:00:c8:3d:63:
         01:c8:5c:36:46:58:0a:97:d7:fd:f7:91:bc:83:e2:e9:bb:ce:
         17:cc:6e:5b:bb:4c:d9:4d:4f:1a:2a:36:c7:7b:ec:10:06:0c:
         bb:33:26:75:d6:f5:99:50:85:c5:c6:81:3c:54:ff:dd:6d:f0:
         81:23:7f:0d:6c:0d:e1:71:39:b8:21:9f:3e:31:6d:fd:8d:bf:
         61:96:fd:3f:24:25:f3:69:b7:0a:30:a9:1e:c2:0d:ff:6a:15:
         70:4f:14:b1:cd:6d:69:54:41:90:a3:fb:8d:ec:43:6d:04:1c:
         7f:59:8d:e0:21:9d:98:05:37:fe:39:8d:bc:04:ad:16:dd:ac:
         70:bf:d6:39:ff:e3:7a:45:9b:5e:95:e2:3f:80:1f:0f:c4:33:
         ff:5a:3f:bc:7a:48:ea:7b:7c:f2:a2:f9:4e:dc:e5:33:77:4a:
         f8:e6:b5:39:1e:85:71:02:0e:0e:27:fd:c9:37:2c:70:43:eb:
         8e:d8:f4:24:29:de:b8:0d:23:a3:3d:7f:1f:29:8c:e2:56:c7:
         0f:08:b8:2b:e0:e0:76:9a:74:f3:26:fb:14:f9:e0:b6:ed:23:
         a6:ea:69:fb:a4:34:01:e2:e1:2b:0f:de:c8:c6:61:45:c0:72:
         9b:f9:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----