Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
File:                     3A-eoEY21-cUGLkwkczQ5XAVvkk.cer (raw, json)
Hash identifier:          U1ZInGJjNQ6rV5IaxSta620wUlT5tHSUgfjcxWwmOAI=
Subject key identifier:   DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6E29A99A753558EDC0470E74C082C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41026
                          IP: 185.56.244.0/22
                          IP: 2a02:5660::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:e2:9a:99:a7:53:55:8e:dc:04:70:e7:4c:08:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:b7:d6:00:aa:6d:21:b7:13:03:9f:0a:65:
                    58:32:b7:14:23:90:6b:aa:18:80:04:92:2f:55:ac:
                    ba:25:09:fc:1e:6a:0d:a7:5b:8a:41:04:e2:ee:c5:
                    0e:39:d7:83:51:a6:a6:a4:72:76:8c:c3:1e:cf:66:
                    af:b8:06:7e:d9:a6:6d:38:27:b0:f9:54:47:d8:a9:
                    0d:97:70:51:28:06:15:5e:4b:5c:08:67:8b:5d:45:
                    84:04:44:e0:eb:e5:35:37:1f:4e:62:76:5c:bc:fb:
                    a8:45:1a:2f:6f:d9:bc:c6:09:50:bc:5f:43:f5:72:
                    8f:7e:fa:b0:4c:9b:36:74:f1:e1:3f:7f:72:e0:4a:
                    15:85:43:4b:f8:c9:ae:f0:4b:26:04:10:73:8c:32:
                    7d:7f:21:48:54:6a:8e:ad:a0:6a:cf:57:73:19:3c:
                    ed:db:4b:0e:54:39:7d:5e:fa:7a:3f:c8:f5:ec:6a:
                    e8:4a:b2:5a:7a:42:2b:dd:59:b6:ed:79:f0:56:ba:
                    81:c8:69:81:8c:4b:26:7f:52:3b:0f:f6:a2:f7:e5:
                    5a:a0:50:4a:bf:01:a6:e3:29:25:79:24:55:ab:ac:
                    76:9f:fd:de:38:05:77:32:57:d3:4a:ae:02:0a:a4:
                    47:e5:85:4d:11:9e:89:91:25:71:a5:84:ba:b6:2c:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.244.0/22
                IPv6:
                  2a02:5660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41026

    Signature Algorithm: sha256WithRSAEncryption
         a2:15:81:95:e7:c0:1a:e2:13:cd:cd:0b:f9:d0:93:f9:e4:9b:
         88:78:2a:1c:ca:d3:42:f6:3b:98:4c:8e:e0:3c:0e:48:71:9d:
         67:5a:c7:fe:47:b2:d9:a0:f4:20:a1:62:15:57:4d:5d:14:b6:
         e3:ac:0a:d4:fd:20:63:e2:20:60:91:97:9a:4d:63:17:ed:13:
         c1:41:5b:08:03:a1:63:40:56:46:07:bd:f2:8d:26:f8:d3:a7:
         b7:8c:03:81:39:5a:18:39:a6:c4:98:f7:d8:cd:5e:cc:40:85:
         17:04:2b:c3:26:4b:a9:ab:4b:70:b9:13:be:5e:fa:d5:a0:75:
         d9:06:0b:3c:68:cc:8a:04:12:b9:a2:0d:4c:65:90:77:ba:e4:
         4b:17:39:a4:6c:51:20:0f:a7:74:b7:97:14:6b:92:27:95:86:
         fc:b3:ca:25:03:cf:8f:bf:d0:ac:37:73:58:f0:3d:89:6d:32:
         ed:a3:4e:21:74:d1:b3:38:a0:a6:84:dd:b3:3b:22:9a:9a:7e:
         c5:fb:e4:32:64:9c:0d:a8:55:51:ca:81:33:9e:c5:cb:a1:f5:
         4e:92:eb:0d:5c:4c:22:63:63:9d:29:34:ff:bb:a6:9e:7c:36:
         af:66:9f:e9:1b:23:58:45:2b:38:5a:6d:68:17:e6:9a:6e:da:
         3d:a7:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----