Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
File:                     1ftSajPzZqqJRhiOXTJr3ORuLEA.cer (raw, json)
Hash identifier:          grXKk3z5IBBxEc8ZUTbLQTuYO307VR72Ap5LbpzQi9k=
Subject key identifier:   D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5770A787BA33F1938768C7ECFCDFC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57826
                          IP: 176.108.64.0/19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:77:0a:78:7b:a3:3f:19:38:76:8c:7e:cf:cd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:a6:a4:7f:c0:a0:4b:82:c4:c1:b9:f8:2d:
                    60:03:2d:4b:c0:87:81:b5:d8:4c:f6:2d:5d:6e:29:
                    08:dc:72:bb:87:e3:77:6b:2c:c9:a5:d9:6d:ec:40:
                    aa:43:01:37:02:1b:5d:34:fa:d0:ab:66:52:e0:e2:
                    fc:1a:dd:dc:27:84:d4:4c:07:d2:99:9d:f6:88:a6:
                    e8:0b:1b:b5:74:1d:f9:b9:f7:94:ab:f8:c1:8f:cd:
                    cd:8c:0b:fa:1e:bf:8d:c5:79:e2:d6:bd:81:92:cc:
                    f3:d9:ff:59:21:96:5c:42:8b:02:08:ec:65:6b:af:
                    aa:57:4a:ad:c1:68:51:5e:3a:17:58:1d:3b:b1:aa:
                    d6:ee:38:cd:65:5d:cb:ad:cb:fb:d5:c9:6f:39:6b:
                    f7:76:cc:1d:14:d7:a9:62:df:9b:74:df:29:c4:04:
                    66:1d:ff:ec:91:91:d6:68:11:63:b3:23:c6:7a:fe:
                    76:74:c8:a7:65:a1:fd:d7:fd:fc:bc:29:0b:00:19:
                    b0:a2:21:98:dd:fa:3c:76:73:7f:b7:b9:35:f0:07:
                    b7:d9:8a:2b:01:38:91:15:46:cd:91:fa:97:4c:d6:
                    34:3f:8c:11:22:3d:c6:3d:50:91:77:d5:0b:1b:9d:
                    d8:87:52:08:e7:08:8f:15:01:76:32:ed:44:7b:03:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.108.64.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57826

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:17:be:70:66:13:47:76:ce:2d:0c:8a:cb:b7:ef:f9:69:
         55:fa:cb:70:4d:e8:28:76:68:97:43:99:9a:e1:f6:45:35:21:
         5f:2f:ab:de:89:5d:df:68:57:2a:f5:69:38:b1:60:a7:15:4e:
         c6:5f:6b:1d:78:e6:71:cd:cc:74:5c:ec:84:f3:34:28:51:11:
         61:4d:8d:4c:bf:ce:27:f3:86:a0:f3:24:b6:b2:e9:68:13:9f:
         05:c3:88:b5:57:b2:93:2c:a3:4c:31:5b:ae:af:59:a7:8f:a9:
         a7:9c:4c:24:9f:57:23:a6:9e:a4:59:29:31:00:99:bd:44:f1:
         b6:5a:a5:e8:f6:de:74:6c:ff:70:e7:62:f6:c7:42:4b:76:d5:
         94:07:ed:0e:4a:b9:d9:3e:34:31:a4:2b:04:10:73:d8:51:92:
         25:3f:70:3b:20:23:89:9a:16:88:54:25:cd:2b:dd:15:52:15:
         26:b7:d3:9a:07:46:31:da:ea:51:7f:0e:d7:e2:50:9f:58:96:
         a8:55:9b:0b:c5:97:31:97:19:69:1b:da:01:4c:cb:e6:ca:9b:
         c4:4a:1c:48:a3:71:13:a4:e0:96:cd:07:3c:60:a6:4e:d1:f9:
         d3:55:9a:29:61:7b:2a:73:8a:f0:dd:ec:28:07:7d:90:b9:96:
         cd:4f:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----