Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
File:                     4wEfCFnQaghJdfTovStVZxDdjDA.cer (raw, json)
Hash identifier:          PbsRuLlXWlLDP6J2Lj7lvm4F/V7Q0ZeSTTa6bwgv3sU=
Subject key identifier:   E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAADB0F0ADE4D9473219E06E9A3131
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211696
                          IP: 2001:67c:2724::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:ad:b0:f0:ad:e4:d9:47:32:19:e0:6e:9a:31:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:fc:45:57:bc:2b:62:9f:54:33:b6:8a:60:
                    c1:28:ba:91:61:d2:3e:ca:89:51:b8:7e:fa:ce:52:
                    05:29:7f:17:cc:98:bd:c4:23:ac:05:2f:e2:7a:8f:
                    a9:20:98:91:2a:a1:70:c3:5f:5c:8f:84:74:ae:0a:
                    68:be:43:96:c4:50:d6:89:99:82:79:95:79:00:9e:
                    05:dd:b7:58:2a:58:4e:c1:e1:c1:01:22:0a:0c:df:
                    d2:bb:95:1d:72:67:40:38:fb:d3:f3:70:5c:24:1b:
                    80:50:fa:f4:88:69:4f:9a:26:96:34:1a:92:d3:32:
                    f3:c9:6f:41:a2:dc:61:c7:d5:79:48:2e:2e:15:ca:
                    8b:08:25:cc:72:82:5c:eb:e8:b5:d6:16:17:06:47:
                    43:c2:9b:13:ad:39:b6:a5:4a:25:83:c6:36:c3:c3:
                    64:b1:ca:fa:79:c9:2a:a8:73:34:00:57:47:eb:8d:
                    69:9f:e9:69:57:6d:75:37:6d:10:d4:3e:bf:18:84:
                    2f:6d:6f:87:3f:37:cc:f8:61:60:77:cb:01:3b:fd:
                    ad:9f:68:57:8c:1a:27:d6:12:20:c5:e2:07:13:d6:
                    9d:b2:77:9a:10:a6:d3:26:30:f8:e9:1c:ce:d2:a9:
                    14:a4:5e:cc:1f:71:7b:b9:92:51:1e:55:8e:7d:65:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2724::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211696

    Signature Algorithm: sha256WithRSAEncryption
         95:32:3a:59:a2:d4:26:fc:96:87:16:0d:d0:ed:38:6e:97:03:
         c4:2e:fa:b5:2c:e5:a2:ad:f6:39:20:79:1d:1b:4e:b6:fd:3c:
         df:df:83:2a:2e:4d:a7:6e:b4:a1:fe:38:2f:2a:f9:1c:16:32:
         50:56:a4:55:e2:77:ac:73:7a:22:41:a5:87:6c:c9:ca:01:a3:
         df:f6:e3:d5:a5:3e:84:0d:25:cf:18:f1:56:4f:bd:53:87:d6:
         b3:8a:1e:e2:d8:96:51:3b:23:4a:f4:cc:3a:f8:b0:a5:55:39:
         f1:dc:2a:48:ed:a0:e1:01:be:06:f9:43:fa:bd:cf:21:c2:db:
         70:5f:18:15:a2:6f:ef:80:dc:ce:58:2e:aa:6b:c7:df:66:87:
         21:4d:78:e4:46:16:b1:ac:cf:53:e4:84:be:1f:1f:e6:b1:28:
         97:c9:c3:b0:78:15:94:33:98:0c:ec:4f:83:26:c7:fc:30:fb:
         82:da:b0:fa:db:12:69:c0:65:bb:c9:04:d1:68:0f:d9:9e:b8:
         33:c7:1e:d1:c8:84:c2:2c:a8:aa:e4:c1:36:4c:96:84:6d:41:
         c3:83:31:7d:7a:d7:3c:f4:93:ee:eb:e7:1b:f5:20:17:a9:a2:
         d0:e7:d1:5f:42:e8:74:1e:4a:77:b1:d3:72:27:7b:8b:f6:0a:
         5a:de:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----