Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
File:                     3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer (raw, json)
Hash identifier:          juy18aBG0zgWOdC/e8J0iHaNxt4OfOobDjYcVBVgGvQ=
Subject key identifier:   DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F7C1B784633388DDC5C32E3E2A9BE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214008
                          IP: 64.190.21.0/24
                          IP: 2001:67c:f44::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:7c:1b:78:46:33:38:8d:dc:5c:32:e3:e2:a9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=de23f18c576d6fa609133533c0d0e38d7732c652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:1f:1e:93:57:8d:0c:e9:ea:24:51:5f:dd:
                    af:d4:b9:68:01:71:5f:82:aa:24:03:d6:40:51:fc:
                    6c:66:20:f9:47:64:53:fe:b0:3d:72:0f:da:f3:e8:
                    45:05:ce:6f:9f:21:17:4b:9e:09:5a:29:ea:ec:4a:
                    02:63:49:81:23:48:9e:07:07:52:88:8c:01:d1:e6:
                    dc:0c:6d:01:4f:fa:de:62:07:64:c7:09:4f:47:b4:
                    22:a6:98:44:b6:e1:9a:51:d6:34:7b:db:db:c3:dd:
                    c0:58:41:ee:4d:9f:4b:b6:31:df:27:c0:72:83:ac:
                    35:b0:11:2c:28:38:0e:e6:47:67:d6:d3:4c:b6:35:
                    64:52:55:dd:c0:36:86:5c:3f:84:1d:b0:51:01:c6:
                    c0:5f:f7:c9:5d:71:58:18:bb:13:bc:bb:31:2c:23:
                    95:39:1a:fe:f8:9c:1a:b4:9a:41:10:49:5b:42:62:
                    17:af:63:e1:77:14:f5:c2:f1:1d:34:7e:79:52:c9:
                    b8:88:8e:62:2c:12:61:11:dc:52:bc:c8:74:a5:dc:
                    da:65:22:62:79:b7:c0:95:b8:2a:fd:ce:d8:cc:a6:
                    96:b0:86:89:92:ce:78:13:00:ce:72:31:2e:ac:eb:
                    dd:d8:bb:d1:b6:84:1e:6d:1f:50:a5:d8:3a:fc:5b:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.21.0/24
                IPv6:
                  2001:67c:f44::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214008

    Signature Algorithm: sha256WithRSAEncryption
         04:1d:9f:e3:97:b2:52:9d:1f:85:06:74:9a:2f:f7:18:c4:93:
         c5:20:29:94:98:3c:4a:0b:0a:d8:d0:29:4b:23:a9:ed:bf:a0:
         85:1c:c1:10:c2:fe:de:b1:07:bf:2f:8e:dd:02:bc:ac:f2:ea:
         1c:85:c3:30:e5:b1:6b:ac:f4:3f:e2:48:22:04:06:ed:a9:68:
         bf:6e:94:dc:54:7f:47:f5:b8:b6:33:f0:7e:e8:ef:14:ee:b2:
         25:0c:16:0b:9e:35:9c:0e:5d:c1:72:62:b2:f9:75:8e:04:00:
         41:08:86:70:a7:26:20:25:5e:33:f6:3e:30:73:6f:c1:01:bf:
         b6:69:5c:44:27:5b:58:3c:cb:68:d2:ca:57:4f:b5:27:6c:0f:
         9d:79:29:d9:84:d5:e7:db:33:41:c3:2a:cd:75:b3:23:60:07:
         a2:56:4a:ea:67:cc:ab:f4:50:7d:67:b0:68:92:98:37:07:09:
         c0:b3:e2:ce:fa:09:e7:0f:fe:f6:22:af:8f:55:60:9c:d7:93:
         b1:52:2b:11:3c:6d:59:bd:c7:84:f3:af:c1:45:72:dc:a8:c7:
         b9:7e:f4:dc:47:fd:55:4c:fd:cc:36:2a:10:a2:59:e7:7d:33:
         a8:3b:56:d5:6e:58:ef:bf:48:36:f3:56:07:a5:cc:b8:c1:b4:
         21:cc:2a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----