Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
File:                     6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer (raw, json)
Hash identifier:          YH1KEJVSKaCR7tsv+u/2DSzjua0MgdZG9g1YyUmcgto=
Subject key identifier:   E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A53200BF9F435C57B1B071FFBE61F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49556
                          AS: 207724
                          IP: 158.255.78.0/24
                          IP: 2a13:5ac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:53:20:0b:f9:f4:35:c5:7b:1b:07:1f:fb:e6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e938f9182b7da44003591eeae2560f8451b3393a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:37:32:4b:70:22:11:e8:86:d8:57:95:f3:
                    00:7f:e7:be:f9:55:46:e7:b9:2a:31:81:fa:a0:d3:
                    32:5a:37:a2:ad:b5:10:aa:c8:94:e3:c2:3a:59:b6:
                    f7:27:29:75:e5:63:1e:c3:e9:59:89:91:0a:4c:58:
                    50:1a:30:92:33:9b:33:c1:35:81:11:cf:99:a9:8d:
                    e0:88:b4:d0:86:37:6d:52:cf:6d:8c:ff:6d:1d:01:
                    d0:32:eb:39:1f:aa:6d:01:96:f5:85:40:b5:16:f8:
                    20:80:12:38:7c:27:f6:f0:0d:3d:b9:19:79:87:3f:
                    ca:06:d1:ad:43:e6:0b:df:94:fb:0f:4e:1a:83:6d:
                    94:07:17:d6:4a:82:73:e1:bd:9a:9d:f8:44:f0:e4:
                    df:8b:13:e0:f1:be:56:26:98:84:66:ec:09:ac:cc:
                    bc:ef:10:56:7f:ae:43:17:ff:1d:fb:d2:73:2a:9c:
                    13:89:f0:0e:a5:01:de:4e:35:86:a0:5c:e6:86:59:
                    e7:c6:89:50:37:76:9c:7d:ab:17:69:3a:df:37:c2:
                    5c:51:44:6f:9e:83:bd:4f:d2:21:3e:fb:0b:40:0a:
                    e3:fe:4b:8b:a9:fb:a3:e6:64:83:ee:6a:d1:47:af:
                    86:de:b7:f2:5a:f2:c8:cf:74:bf:fd:1e:70:8a:cb:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.255.78.0/24
                IPv6:
                  2a13:5ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49556
                  207724

    Signature Algorithm: sha256WithRSAEncryption
         2b:f9:39:d4:6b:8e:34:5e:f9:ef:84:ca:0d:eb:8f:29:c6:c0:
         5d:ca:04:7f:29:0a:76:91:6c:c1:7c:18:1a:1a:e5:06:4c:fd:
         0b:0c:2e:c6:3e:5d:94:5a:c0:72:1f:30:a9:99:e5:97:40:00:
         87:b9:02:2c:07:d5:8a:db:08:2e:8a:36:6b:40:f1:40:0b:8d:
         0b:a5:54:19:f4:1c:bf:8e:09:7e:35:f9:bb:17:ae:7e:9d:ba:
         2f:0c:c3:cd:e7:bb:4d:84:11:7e:f5:62:55:7d:69:d6:73:f4:
         f2:60:51:ac:58:7b:8d:35:56:cf:ec:ce:9c:46:90:3e:25:8d:
         50:3a:1e:df:50:11:cf:52:09:e2:2f:7c:72:a5:58:b3:91:99:
         ba:a8:3a:fb:17:88:6f:19:14:c1:93:2a:1d:56:a1:68:d1:5f:
         17:11:b0:a6:ad:af:d9:8e:09:09:56:09:cf:8d:18:86:ba:b5:
         4d:3e:d2:38:25:2d:95:ce:09:eb:d0:30:f1:25:dd:e6:95:25:
         1e:13:7e:24:1b:fa:bb:7c:94:5b:03:e6:db:7f:4a:b3:ef:41:
         ca:95:b3:f6:b4:d6:de:d6:2a:32:4e:ad:62:2d:93:48:70:d5:
         da:f4:d9:71:08:1b:8b:87:d4:e7:58:d6:69:23:46:d9:ab:db:
         92:a9:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----