Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
File:                     4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer (raw, json)
Hash identifier:          s16djZrfrgwMGEDwdAG4ehy/CRtRqN3WoGn+dy0Oo00=
Subject key identifier:   E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942068195CB2A591C0DF23A6B615981812
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199789
                          IP: 2001:67c:b98::/48
                          IP: 2001:67c:29a4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:19:5c:b2:a5:91:c0:df:23:a6:b6:15:98:18:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:1f:02:ee:c8:ce:31:c8:e3:cc:7b:b2:cc:
                    96:11:75:f2:65:54:73:17:85:c4:22:8c:91:e0:1b:
                    dd:d8:10:ca:1e:01:6d:a2:0c:62:2f:af:28:df:e3:
                    d4:c3:5a:96:6d:22:ef:69:cf:ed:6d:1d:3e:89:3d:
                    52:79:36:d4:b7:3b:76:40:19:9f:54:a4:2b:2e:96:
                    64:a8:c3:4b:77:f8:1e:c9:77:f9:81:f6:cc:6a:5c:
                    bc:50:41:b2:46:b4:ea:75:8c:5a:f7:6b:56:b8:47:
                    f5:c8:6c:72:8f:30:54:c9:60:6c:98:57:be:86:f5:
                    09:cb:c3:c8:64:48:13:df:68:83:1d:f2:60:a5:5f:
                    25:40:e5:f8:fb:a3:1e:11:eb:1e:99:9b:26:bc:a8:
                    a4:26:b0:dd:cf:30:41:0f:62:9a:19:a4:0b:39:ef:
                    67:f0:d4:dd:17:87:0e:cd:f0:8c:52:b8:32:3d:9b:
                    c9:ae:bf:a8:65:56:e9:3c:6a:72:05:e5:c5:92:9e:
                    fd:9a:e3:5a:ff:57:43:e9:d6:4a:a5:23:74:04:10:
                    af:ef:7a:8f:bd:ba:f2:4c:8e:0c:9a:ce:a4:4d:ff:
                    fc:89:fa:8e:a8:6f:b0:e4:aa:b1:1c:e8:00:f0:33:
                    bd:46:e2:64:41:da:8a:6f:96:77:0a:10:16:51:51:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b98::/48
                  2001:67c:29a4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199789

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:4a:b5:4d:12:fe:88:23:20:bd:ee:fb:f4:1b:0d:db:8f:
         ab:71:7d:4a:0d:8d:90:db:80:83:04:fe:d4:65:bd:16:f1:9d:
         60:b1:16:28:37:20:87:64:a9:06:b8:4b:f1:5a:0b:fe:fa:14:
         cc:c4:88:dd:d5:05:74:62:1d:a5:72:47:c0:b1:0f:00:18:9a:
         8f:47:41:6f:f1:95:2a:4c:66:26:9b:38:b6:75:af:fd:4a:89:
         7b:32:83:8f:96:7f:86:3c:74:fb:0d:d1:50:52:40:7c:c2:5e:
         42:fe:af:8f:d5:1b:7c:90:3c:3e:d0:51:8e:39:30:1d:7a:d0:
         54:6b:6a:7b:d0:1a:73:54:78:fd:63:d2:2d:b7:ba:c9:9b:8f:
         48:15:b7:cc:d5:f6:9d:d6:04:c9:6b:0c:9a:63:fd:a1:b4:c4:
         d9:84:be:1c:fd:9e:5c:3c:af:ce:a0:b2:a1:eb:69:30:a3:3a:
         51:00:93:1e:a5:82:2c:82:f9:09:b3:28:15:09:51:ed:1c:6c:
         34:ec:f3:78:77:c3:f7:25:f9:0b:36:9f:85:1a:44:78:a9:2b:
         8a:eb:eb:a5:9a:19:e1:9d:f1:fc:74:95:8c:a1:b8:e2:b9:9c:
         84:25:eb:5e:e7:de:16:7d:c1:75:ac:cf:14:1b:8f:53:81:80:
         74:67:ac:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----