Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
File:                     5F0K3ClN02bfatqIATTb0OaIzPc.cer (raw, json)
Hash identifier:          oltQDP1cyIlIbYFheu9wt6QUQdiroUR1HN+YvDIdJns=
Subject key identifier:   E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420680195FE29A2A11C0FD5B83A375F9F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57007
                          IP: 91.229.252.0/22
                          IP: 2001:678:84c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:01:95:fe:29:a2:a1:1c:0f:d5:b8:3a:37:5f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9f:52:df:7b:12:55:0c:93:9b:0d:01:9d:a9:
                    b0:ab:79:bb:3c:cf:e6:ef:40:15:41:f7:57:f0:4b:
                    78:c7:85:07:c8:47:b8:cf:de:39:b7:43:94:c1:39:
                    f6:73:9c:d1:91:e7:46:34:a0:44:29:40:07:77:be:
                    35:41:a6:e5:5a:4a:11:34:3c:bc:c7:67:d2:67:13:
                    30:04:9a:e3:41:a1:31:72:f1:ae:3e:f9:c0:b0:4d:
                    97:83:b6:1f:9a:af:27:0a:92:0e:fa:2a:23:b0:da:
                    94:09:84:4e:76:96:2e:64:b9:fa:3b:89:0f:9b:df:
                    99:37:e4:7d:cd:19:17:39:4e:69:d2:d6:62:3e:da:
                    df:9d:ac:7b:87:d6:86:1e:1a:41:5f:33:1b:63:6b:
                    5c:c1:60:c5:ee:9c:77:8e:60:53:04:cf:f5:f2:36:
                    58:a7:39:eb:bd:ab:83:f8:9f:a0:10:50:d0:8d:ad:
                    02:8e:57:6b:ba:aa:f8:a4:3c:9d:3c:eb:70:2a:bd:
                    a9:05:1d:64:9f:e6:64:76:45:f2:a0:6b:42:3b:bf:
                    17:19:d0:9c:1b:76:14:26:cb:0c:35:f0:89:e6:63:
                    b0:d2:4f:d1:f9:a7:87:89:c6:f8:b6:fc:1e:71:b5:
                    8a:07:2b:5d:95:b4:9d:b3:41:36:cb:15:7f:d6:8e:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.252.0/22
                IPv6:
                  2001:678:84c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57007

    Signature Algorithm: sha256WithRSAEncryption
         87:69:9a:65:22:3a:01:09:4a:81:ac:7e:5e:4a:52:6f:f9:1c:
         e6:dc:cb:3e:7c:16:90:d5:d7:f3:2d:83:95:29:52:65:cf:80:
         5f:8f:0a:87:b1:1a:6c:93:f6:60:eb:2c:32:36:4e:8b:83:2a:
         77:e5:ee:f4:5d:37:83:bf:0a:88:6a:bc:47:e6:09:ea:a0:73:
         de:21:f0:e0:e7:68:88:83:0a:50:bb:ae:2c:10:cb:81:d7:a2:
         95:36:f4:65:f6:2c:a9:88:34:9d:f4:5a:9c:c0:17:68:0e:24:
         e6:91:13:41:0f:6b:6b:ff:58:80:ee:5c:cd:09:a3:fa:b8:43:
         4a:ee:5b:ca:ec:1a:55:49:4c:86:0c:8c:8e:99:68:08:f4:b6:
         b8:79:f8:0f:57:27:58:66:87:75:0e:29:46:85:d6:52:41:24:
         07:43:f6:89:a6:f6:c0:ea:7d:60:23:86:37:85:3f:38:cb:41:
         68:4c:7e:d0:f2:b3:57:0e:19:49:e2:65:62:fb:31:f6:ad:54:
         61:03:d0:ea:2d:3e:a8:84:65:63:86:00:d4:05:2e:f9:88:21:
         9a:fa:5b:cc:fb:75:09:8e:8b:7f:f0:18:b1:de:2f:65:b0:5e:
         77:9d:b4:43:ea:ae:5f:c7:1d:a9:e8:45:1e:03:bb:79:d4:26:
         fc:c5:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----