Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
File:                     5z3xVch6WQrB5ThUTPM1bk_IF0g.cer (raw, json)
Hash identifier:          MqxPVdKb/FQGB9p56/uo+eFKBO8uyhXs3HtXOK61DSA=
Subject key identifier:   E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F70B5569D03CA480ACB754EAAA591
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206384
                          IP: 2001:678:ce0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:70:b5:56:9d:03:ca:48:0a:cb:75:4e:aa:a5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e73df155c87a590ac1e538544cf3356e4fc81748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:51:e2:b8:7e:ec:d3:02:2a:06:5b:5e:7c:
                    e6:ae:3d:da:c6:c0:4a:e9:15:9e:7e:3e:45:70:df:
                    a7:3e:24:42:41:54:ab:10:80:73:d0:06:38:e8:b0:
                    ee:6e:e1:7e:39:07:f7:e4:14:e1:70:e3:b9:08:9d:
                    b6:f5:2a:78:b3:40:27:5e:a0:60:46:85:b0:27:44:
                    40:19:0a:a1:d0:ac:36:b0:2f:ff:3b:b4:05:07:07:
                    b6:33:ee:9d:3f:97:5c:58:af:1f:02:a3:b6:ac:90:
                    4a:27:8e:53:61:3b:86:65:5b:4b:60:ad:59:62:9e:
                    d8:bf:71:65:64:89:63:d6:59:65:b4:0d:eb:41:a9:
                    0b:1e:b3:64:f0:64:f2:d0:a2:31:a2:9e:04:e8:73:
                    ce:44:50:66:7d:55:49:10:a5:37:9a:52:03:d9:16:
                    aa:cb:1f:db:f6:0a:67:dc:37:01:e0:71:ee:ea:b4:
                    0f:93:7e:ed:82:4a:fa:f2:5a:aa:bf:bd:8c:ca:3d:
                    32:09:bc:ee:60:8b:3a:4d:eb:a6:4a:39:fe:ca:d1:
                    92:ef:83:25:bf:ab:3d:3f:2a:a0:72:35:66:f8:09:
                    52:4f:06:58:78:6c:87:9d:dd:99:dc:ef:94:08:1b:
                    97:57:7d:6c:43:2e:b3:30:6b:16:b3:b8:7e:03:30:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:ce0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206384

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:58:0b:83:9f:a2:24:06:e3:4b:76:44:9f:a1:88:4c:69:
         7a:23:35:ee:39:a4:74:fb:5e:2f:0b:71:5f:bd:8e:85:0d:dc:
         6e:8a:3f:c6:42:a3:5d:06:29:37:75:34:e4:ed:c7:25:46:6f:
         5c:dd:b2:c6:d7:48:8a:27:08:09:f2:7c:f0:00:e5:ec:2d:c7:
         00:5a:79:94:5d:6e:e9:59:cd:59:18:f0:78:aa:a5:73:6d:56:
         e5:b9:6f:c5:c3:f5:b6:6a:d5:47:04:12:2c:59:57:11:9e:90:
         81:87:d7:99:d0:c6:71:2d:4c:2b:6f:f9:20:f7:50:4e:27:43:
         62:30:2f:a2:64:a3:3f:4f:39:15:b0:35:79:54:85:20:be:e7:
         a8:89:81:37:c0:30:b0:c1:34:f1:cd:f0:b1:5d:4a:28:54:ae:
         d9:27:04:65:4a:fe:53:98:c1:8f:a7:cd:38:31:13:70:f5:03:
         b6:20:c4:a6:25:b4:9d:26:09:4e:1f:7a:9d:37:35:7c:2d:92:
         25:c2:62:08:78:cf:b9:2e:a0:e4:51:74:9a:ca:7f:ec:3b:51:
         b0:bd:10:4c:fc:88:21:4a:54:58:0b:77:35:93:2d:10:bb:51:
         66:6d:9b:9e:8d:df:b6:f8:24:ee:4c:5c:2d:b7:ae:76:45:0f:
         c0:91:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----