Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
File:                     nmh1g4EMwAZO207-QFf1phpV5ws.cer (raw, json)
Hash identifier:          b+9PXxvajcVY4m6dg/YNdg0a8qdV15cPnUf1nc8lxmo=
Subject key identifier:   9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D8054B14659DBE5D467F984787029C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197550
                          IP: 46.173.192.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d8:05:4b:14:65:9d:be:5d:46:7f:98:47:87:02:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5c:6d:a3:60:ff:15:15:1e:fa:96:17:fa:f1:
                    3b:0a:09:da:f1:c4:46:19:28:17:fd:ac:bf:bb:f9:
                    73:fa:b9:d2:01:a4:c1:b8:a7:af:1e:13:bc:9b:69:
                    05:1e:b7:4d:ea:51:f6:81:47:d1:a3:e2:48:9b:19:
                    8d:b1:0f:a6:a1:2e:7e:74:e4:7b:f6:ed:a7:1e:12:
                    cb:be:50:7f:4f:29:55:2e:70:52:75:42:2a:08:ee:
                    c4:03:04:a9:25:4e:15:29:24:f5:ec:13:ad:eb:48:
                    61:95:c2:76:ff:b8:71:e9:fc:36:47:ad:99:02:16:
                    01:2d:b1:e7:97:27:49:ed:a6:15:0b:99:da:9b:c2:
                    13:ec:5a:77:a6:bb:2b:a8:99:82:d3:a2:b1:dd:ef:
                    93:f2:a8:55:b2:4a:99:26:e8:4a:bd:d0:8c:dc:f0:
                    7e:7b:d7:4f:f3:ef:ed:a5:62:16:f3:30:ae:4d:52:
                    22:da:57:b3:6e:49:99:9c:26:2b:6b:67:17:b9:78:
                    1b:6a:e0:6c:2c:01:c4:45:8d:5e:ef:72:31:f7:54:
                    21:0e:7a:97:f5:81:cb:9b:d6:2c:8a:77:29:dd:01:
                    d3:a8:29:a1:c1:bf:67:10:76:eb:9e:58:f3:0e:06:
                    35:b2:a0:c2:cf:22:49:75:b8:53:e7:0f:d8:b1:fe:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.173.192.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197550

    Signature Algorithm: sha256WithRSAEncryption
         6a:d8:fe:08:8d:d4:5c:b0:ed:11:ac:d8:84:f6:16:dd:2b:4d:
         c9:9c:4f:e8:f2:b4:8b:a6:66:f4:4d:49:e3:23:a9:ab:4c:0f:
         33:eb:aa:1f:f3:dc:2a:1b:48:d7:9d:8c:d3:46:6e:ed:88:ec:
         9b:c2:c1:66:3d:48:0e:27:cf:88:56:3f:34:26:e2:17:ec:f3:
         1f:74:1c:68:93:af:3c:4b:66:28:bc:45:47:b6:d6:cf:72:c0:
         bd:e6:35:57:ed:b2:42:9c:4a:22:45:a5:fc:24:ca:b1:27:bf:
         3d:a0:fd:11:dd:f2:8e:95:12:7e:36:9a:37:2e:d2:7b:57:43:
         48:61:e6:e0:7e:c3:9d:74:0b:00:1a:ad:d4:ef:3a:bd:cb:20:
         f7:78:31:1b:34:58:a1:4d:a3:27:a7:41:91:20:a0:58:d3:74:
         90:15:b7:d2:27:9a:98:71:a3:c5:09:11:81:7c:de:af:03:23:
         ac:40:12:24:4f:c2:18:c9:5a:88:e9:49:26:1a:40:42:ab:25:
         1e:96:22:9f:b0:b1:d4:e3:8c:2f:a8:58:f9:ee:77:73:95:7e:
         8a:bb:fb:13:aa:bd:ee:4c:af:d5:67:f4:ec:51:20:1d:52:cf:
         48:39:e8:bf:98:8c:ef:c1:11:7a:30:65:88:ca:f6:fa:ac:78:
         aa:32:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----