Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer (raw, json)
Hash identifier:          8aKD091exvcAt9uXDdBfKDXOqgfbz3/+Gfmh+ojw4qI=
Subject key identifier:   EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5BFA2A195A3C32670E19EAF81E93F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:420::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:bf:a2:a1:95:a3:c3:26:70:e1:9e:af:81:e9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:9b:e7:7a:09:3c:ef:3b:af:55:c7:0a:99:52:
                    92:da:62:33:70:6d:81:35:8f:74:5d:94:d3:93:09:
                    95:59:30:2e:f0:b2:a7:a3:78:00:77:cd:7e:af:20:
                    61:51:79:e5:ce:04:a6:56:ee:c4:e7:ce:4d:25:a6:
                    b7:d0:49:37:44:5b:b9:2c:0d:f5:50:47:f4:e1:29:
                    f6:6c:26:65:47:d8:44:7f:05:5f:f7:69:0b:8d:5e:
                    f4:ab:ee:36:e5:4b:ce:cb:a9:f1:61:82:fc:a7:b7:
                    91:c7:95:5e:ce:49:69:19:4c:b3:f0:94:ed:94:2a:
                    67:04:c9:5b:ce:89:11:5e:84:78:ed:d3:3e:a7:35:
                    63:e0:52:fb:7c:b1:fe:6a:12:c9:8b:e9:3c:5a:1e:
                    02:56:88:4f:99:1c:a1:66:91:90:a7:fa:62:ea:86:
                    0f:ba:91:42:25:89:8e:c0:81:34:5d:6e:6c:6d:5d:
                    c0:9e:33:8c:5c:23:05:21:33:9b:5d:3c:2c:2d:c0:
                    61:ae:40:60:ac:8d:35:35:1f:d8:74:17:0a:bb:b1:
                    5d:9a:6f:1b:67:32:a0:81:76:d6:ac:a3:a4:3e:1a:
                    65:3c:70:9b:a9:34:09:62:ef:05:47:b4:31:2c:46:
                    79:c3:b5:05:74:5f:59:0b:f4:62:6b:51:16:7a:bc:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:420::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:b9:f8:a8:de:3e:54:40:26:18:79:e6:60:a4:6e:2f:72:1a:
         46:17:fa:44:45:ec:04:32:da:84:f9:9d:e9:fa:f9:a1:63:b5:
         1d:4b:b2:70:18:64:73:50:7c:85:1b:a5:66:03:e1:8b:f2:78:
         d7:da:e9:0b:17:1b:e5:21:2d:96:c8:6b:84:76:ff:a5:39:cc:
         d4:5e:b1:18:e3:5f:2b:ad:eb:60:f7:f9:1a:a8:03:db:ae:39:
         71:dd:19:d8:1a:d4:e2:d3:af:0b:9e:77:84:6a:38:6b:0c:c7:
         ec:08:e7:6a:2c:70:c8:6f:c7:a6:88:0e:c2:60:9d:bb:1e:93:
         76:32:44:24:eb:cb:23:3d:ab:3a:af:23:37:c4:a8:e9:d5:db:
         39:56:31:c0:06:b1:00:fe:97:78:36:cb:62:e1:c1:ce:40:e3:
         cd:33:11:fb:aa:8c:03:64:36:5a:3d:20:21:95:a0:ee:e7:d2:
         b2:2f:cc:0a:a3:c7:c7:67:43:31:13:89:bf:ad:c2:cd:10:d6:
         43:d3:ef:97:1b:02:0f:6e:93:d6:f5:83:fb:c3:ce:24:50:a4:
         e7:7e:e9:52:ca:6d:40:5d:83:54:f2:90:ea:51:e2:d5:44:12:
         57:63:64:68:a9:55:dc:c6:7f:46:42:f8:a8:16:8b:34:e2:06:
         d7:44:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----