Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
File:                     11d1Kggad4_B0s7hsNaqRdUaLEk.cer (raw, json)
Hash identifier:          EU2Ly0UwqDWZphnQZKb4yo57CO9psu4yHPOItOPG5/o=
Subject key identifier:   D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C98DE9505FAFAB2DF44DDC4D05DCE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59700
                          IP: 91.221.142.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:98:de:95:05:fa:fa:b2:df:44:dd:c4:d0:5d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:3d:20:ed:49:55:f0:0e:0f:78:ec:05:1a:
                    6e:13:17:30:94:a9:34:59:0b:37:7e:b8:e3:fc:76:
                    87:3c:e1:ac:a8:ef:10:90:ba:29:37:41:2c:0b:b6:
                    e1:80:ce:6b:fe:9e:47:76:39:0c:1f:49:cf:b7:ee:
                    28:04:b9:d9:4f:16:6d:bb:62:3c:74:23:a9:a3:b4:
                    e7:12:32:f6:a2:30:d2:11:4b:7e:1d:ed:be:50:9c:
                    76:2f:f4:10:02:6d:fb:3b:29:ca:a5:2d:ee:3b:d5:
                    25:73:28:25:98:97:54:7a:c1:49:15:d6:bc:64:a7:
                    e2:d9:d6:71:31:2a:da:3d:2d:60:a2:68:c1:17:1d:
                    23:1e:f0:77:f4:62:fc:e0:7d:85:9c:74:a6:2a:cf:
                    da:c6:bc:94:36:95:45:de:a2:18:4f:45:af:87:76:
                    3e:52:a5:24:85:e4:54:18:61:4b:c4:60:9e:15:7a:
                    3e:7c:43:7f:a0:44:eb:1f:31:f9:2b:4f:28:d5:47:
                    73:4c:41:4b:e9:fa:f0:e8:9d:83:db:76:b7:29:58:
                    82:8e:c2:20:12:a9:99:0b:94:3d:fc:93:6b:c3:29:
                    92:54:ab:d3:1c:8f:ee:8d:36:a6:10:54:eb:e2:8d:
                    11:02:5f:6c:71:27:f7:4b:91:a5:f2:1a:5a:2f:9a:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.221.142.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59700

    Signature Algorithm: sha256WithRSAEncryption
         6d:9f:c4:42:be:40:df:1c:1d:6f:bd:b3:25:cc:55:6f:bc:77:
         69:7e:01:69:93:43:d1:5c:4b:91:5e:dd:d1:13:71:a2:8b:1f:
         a1:67:00:61:5e:3d:2f:74:78:f1:d7:e1:3e:98:18:d9:3a:43:
         ee:bc:48:c1:12:cb:9e:8d:a4:83:ae:04:21:43:54:2b:6c:3f:
         26:d1:49:79:1e:80:b7:f3:0e:da:4b:3b:3f:bd:74:21:71:32:
         9c:56:56:63:03:89:eb:b9:2b:46:85:ca:6c:4c:e4:e0:5f:cd:
         4f:b0:a8:c7:4a:e8:dd:7b:08:81:29:6c:3a:a4:a7:de:63:5d:
         07:14:0f:7a:a8:fc:a0:ab:e3:ce:34:c6:82:e7:fa:cf:fd:13:
         4d:93:dc:a3:3b:b8:ee:a9:3e:70:42:94:79:da:56:2e:5c:62:
         9c:c1:9a:c6:d4:04:72:66:82:4d:3b:c2:1c:e2:8b:a1:5d:72:
         08:f0:89:9a:4e:45:70:89:54:30:2d:fb:07:06:90:b3:07:b5:
         bd:c1:45:25:c1:e3:c9:70:40:55:2d:0a:c9:5f:2b:d1:cb:9b:
         83:04:ff:f7:90:7d:95:e4:71:4f:b3:e5:02:c1:ca:19:74:24:
         b5:59:9d:38:e7:72:26:b2:51:7b:bb:17:2b:92:ef:9f:3f:ae:
         5d:20:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----