Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.cer (raw, json)
Hash identifier:          krkSqiZRbAY66oYlqw4pi7m12WrADTHuMhdCaQpXoc8=
Subject key identifier:   E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC047EE8B9340E4EC8BD4A52C927C7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48276
                          IP: 2001:67c:2fd4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:04:7e:e8:b9:34:0e:4e:c8:bd:4a:52:c9:27:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:f7:b0:b2:a4:57:12:32:fe:2d:c7:eb:48:
                    fd:ee:c2:a5:5c:c1:45:70:97:58:db:d1:5c:8d:30:
                    1b:f4:a5:92:85:6b:39:e5:92:ee:11:a6:68:2c:42:
                    19:91:bc:c7:18:f3:da:c4:e1:c3:f3:3f:5a:c9:4f:
                    cd:c5:b8:bd:fb:af:03:65:25:d3:c2:fe:d9:2f:bc:
                    01:5e:ff:85:9b:f4:8e:d0:ad:fd:19:d4:75:3b:4a:
                    8e:e0:c8:d0:e8:ef:31:3c:63:25:cf:e3:76:9e:1a:
                    17:3d:f1:4c:8e:04:6a:89:45:61:21:e2:00:04:97:
                    35:76:ec:a8:67:9c:6a:3a:2e:a4:03:94:48:dd:d7:
                    17:45:b4:28:19:5d:3a:ae:2c:23:66:f0:80:80:e8:
                    8b:ab:00:7a:e8:d6:1d:e5:bd:31:98:d2:5b:5e:ac:
                    8f:8b:26:d4:35:38:f2:eb:05:d9:67:60:e2:09:f2:
                    f2:87:fb:5b:51:35:65:b5:10:7f:4c:6f:21:d7:ac:
                    c8:6b:a4:dd:a3:82:e7:93:8f:e1:79:db:f2:56:fa:
                    25:26:1c:51:c1:09:4e:63:2d:c2:9c:b1:7d:ce:5a:
                    c1:b3:f5:b1:30:a5:b7:ec:84:0a:06:68:15:3a:03:
                    db:24:b8:13:1c:3a:39:b6:1d:7f:7e:ea:1a:cf:76:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2fd4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48276

    Signature Algorithm: sha256WithRSAEncryption
         8d:33:07:d6:71:b2:5d:ac:8c:fc:3d:4f:fb:5b:63:21:81:df:
         e9:4d:41:8f:1b:cf:11:1b:ce:d4:3a:67:45:6e:90:c0:c3:8e:
         a4:92:70:aa:51:09:29:97:7a:7d:87:e2:22:0e:a4:6d:f1:08:
         dc:dc:10:cd:fd:66:2d:54:9f:ad:13:3a:4c:40:b4:6a:e0:36:
         4d:fb:53:13:d3:96:7a:32:77:07:47:72:1d:9a:97:6d:aa:c8:
         4c:f4:01:5b:fa:19:9c:5c:d2:e9:8d:7f:90:64:d6:bc:cb:e6:
         0b:2d:1e:3e:bc:a3:58:18:d8:00:6d:a4:2b:f0:ef:0d:7b:b2:
         89:a6:ca:89:76:02:6a:5b:01:2b:cf:80:33:71:1b:5f:d9:3f:
         8f:26:14:f7:e6:c7:06:6b:5c:5e:60:9d:13:46:5b:26:c9:5a:
         71:c5:61:9b:5c:b4:84:d3:29:91:9a:9d:31:60:c8:98:a2:d3:
         e0:9f:8b:79:10:fc:31:d6:66:41:fd:68:e5:69:b8:1b:7f:3a:
         96:0b:a4:b6:1a:ad:fb:f8:4e:55:98:ec:c0:3b:16:82:95:39:
         11:25:47:b1:5d:b6:30:6d:ec:27:7e:fd:52:a2:d4:04:09:0c:
         b1:22:f1:37:e9:a8:52:15:52:97:d5:ec:06:ca:3e:36:13:5c:
         dd:70:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----