Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
File:                     3-xclF0DU12WcwlREFRrHJjmGGA.cer (raw, json)
Hash identifier:          LgOyBnsZOSjexgyzAKe23kP3gqL/GX8lE7SmUGlaMWk=
Subject key identifier:   DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA248D7ED4C49B2495894853B02025
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197799
                          IP: 31.193.200.0/21
                          IP: 2a03:1e40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:24:8d:7e:d4:c4:9b:24:95:89:48:53:b0:20:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dfec5c945d03535d9673095110546b1c98e61860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:89:5c:87:26:f0:ec:7a:8a:d1:af:aa:c8:
                    c0:17:a8:69:46:fb:5a:01:89:9f:ce:ab:02:42:2f:
                    30:5b:d2:5f:58:fa:f8:65:e5:43:03:d6:b0:df:54:
                    e1:33:aa:b8:74:ce:d5:14:45:a9:5d:9e:fc:6d:28:
                    19:98:e1:07:62:60:c1:52:64:b6:8c:97:23:35:26:
                    35:51:14:36:62:ac:0a:1c:cc:14:48:8f:0c:c1:9e:
                    6d:c1:00:e3:ff:94:83:a9:af:44:e9:cb:c4:60:be:
                    22:ce:e1:43:b5:e9:a9:31:a9:0f:2a:0f:5d:7d:7f:
                    21:12:68:cf:38:4e:e4:df:dc:87:9a:a7:ac:6f:3b:
                    fb:5d:02:1b:31:a0:bf:43:f6:97:e8:ed:1f:a5:7e:
                    fa:6c:64:f6:5e:47:14:88:38:56:d6:b0:92:bd:1c:
                    b4:9d:20:71:0a:65:c6:51:53:cb:ce:8f:07:67:65:
                    a5:34:75:c4:c9:3e:0c:da:cc:dc:aa:bb:f2:23:f3:
                    1a:5a:b4:42:fc:e6:af:7a:2c:78:c8:f6:5f:1e:76:
                    ad:64:c8:9e:0e:98:f3:1e:f7:54:92:fa:f6:b5:05:
                    04:96:81:67:07:fa:7e:d0:bf:1e:23:81:b0:d1:9f:
                    10:3b:86:b4:fb:38:80:2f:e2:d0:6b:27:77:ed:37:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.193.200.0/21
                IPv6:
                  2a03:1e40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197799

    Signature Algorithm: sha256WithRSAEncryption
         3e:4b:c1:ed:eb:4a:fd:79:2e:73:58:6e:ff:c0:21:14:e3:9c:
         a2:13:29:17:13:e3:74:91:e1:eb:76:ab:95:98:11:7f:09:48:
         ad:47:4b:f3:0c:de:0e:05:e0:2c:b0:a1:58:a8:64:12:8b:04:
         25:3d:5b:49:e4:a4:f9:61:5a:ed:4e:ce:8f:8e:72:58:af:3a:
         64:ec:d1:12:10:ec:94:9e:22:cc:63:fc:00:e3:31:50:0d:38:
         b3:c3:e4:e0:20:6c:dd:97:05:81:5a:17:f3:89:fb:3e:b9:ca:
         5d:59:b2:f7:7c:38:41:53:de:d8:d8:d9:ab:8f:cd:f2:e6:6f:
         a4:3d:7c:8c:57:de:98:09:97:f6:ec:a8:1b:0b:4b:75:93:77:
         33:02:eb:42:bd:43:5e:5e:0b:62:93:30:9f:8c:54:9b:47:aa:
         54:dd:37:f4:99:13:e1:30:20:04:89:90:fb:4f:22:d4:a9:8f:
         f0:24:59:b9:0c:b8:e7:ad:f1:35:67:df:2d:42:11:91:14:d3:
         55:22:48:de:4e:11:70:10:4d:8a:ac:a1:ae:96:b0:5f:7c:88:
         69:5d:6b:9b:b0:99:71:50:fc:16:c1:df:4b:4e:49:c8:26:37:
         a3:25:5b:11:78:cf:f6:32:85:b2:78:5f:ae:c1:df:7c:fe:c2:
         13:d4:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----