Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer (raw, json)
Hash identifier:          /zeyctb/BfIxH8fbnGwIH916zxzzwjZum4usGdKO3JQ=
Subject key identifier:   EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD9A60DD02144CF4D95E07B52A5D91
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8523
                          IP: 80.76.144.0/20
                          IP: 164.40.176.0/21
                          IP: 2a00:1d28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:9a:60:dd:02:14:4c:f4:d9:5e:07:b5:2a:5d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:15:60:cb:25:16:ac:ed:26:5a:f3:1f:f7:
                    5d:60:6c:50:a2:aa:6f:24:71:88:f9:ef:a2:08:bc:
                    af:68:67:07:f4:a0:93:18:ce:26:b0:5b:cc:98:55:
                    6a:73:c4:5c:a7:6d:71:a3:46:40:58:43:71:b3:be:
                    2e:90:05:dc:2d:d0:c3:47:df:28:0b:86:5f:28:c1:
                    57:74:c4:7e:79:85:9e:ef:52:0a:47:f1:33:ca:3e:
                    4f:8d:ba:9f:7a:62:a8:19:79:87:db:f1:56:df:c9:
                    3b:3f:3c:d6:8b:19:36:ed:4f:f6:50:e3:af:e9:ac:
                    42:cb:5a:15:83:df:bb:9a:bf:48:d9:54:ce:00:0b:
                    7b:e0:d2:55:9f:6e:d9:28:d9:a4:f4:60:00:da:ff:
                    97:c8:fc:99:c9:fe:12:f3:6d:9b:d3:45:3d:d2:d1:
                    a8:4d:16:3f:9a:55:1c:0c:a2:ab:96:42:95:a3:08:
                    b1:57:8b:6e:90:39:7b:3e:92:64:5b:16:0c:88:5e:
                    d6:43:63:b1:29:f3:e8:f5:06:57:e5:06:42:66:71:
                    a7:a9:99:15:2f:14:3f:36:d7:55:ea:6a:59:5e:06:
                    b6:fe:35:94:9e:16:66:68:50:02:4f:f3:5c:2b:7f:
                    b1:cf:dc:55:72:34:30:d7:5b:c6:15:55:2d:1c:83:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.144.0/20
                  164.40.176.0/21
                IPv6:
                  2a00:1d28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8523

    Signature Algorithm: sha256WithRSAEncryption
         90:4c:4d:32:2c:d7:43:06:d2:03:4f:64:40:20:9e:96:58:0a:
         b2:76:2b:7a:66:dd:44:c8:d2:46:6d:70:e9:94:b7:b9:de:87:
         25:ea:f5:80:3e:7c:ca:a0:ee:bb:d1:44:53:69:94:9c:b9:8d:
         b9:85:ef:02:5d:7d:51:80:59:99:c2:50:92:17:54:f6:a2:72:
         bb:55:4a:33:dc:4b:b3:38:e6:ae:14:da:53:5b:48:46:73:94:
         22:6e:ba:ee:64:20:7e:6d:78:45:e4:b9:01:f4:23:f1:67:d9:
         d7:73:41:24:83:cf:fd:be:b0:dd:54:91:42:2f:02:e7:16:db:
         80:30:59:df:4a:2b:f8:29:a4:a6:eb:c6:25:65:a4:ca:18:42:
         68:f5:4e:9d:61:cd:d7:85:64:f9:00:f5:b8:13:6c:57:dd:99:
         0a:44:65:d8:35:c6:48:60:85:33:d6:57:b9:9f:a9:0c:8b:6b:
         d2:cc:5e:4a:e9:b8:83:9e:62:fb:7f:9a:69:53:f3:61:ce:9b:
         22:14:81:f8:ce:0c:2a:66:77:7a:bf:46:e0:d8:f9:bf:ae:62:
         51:b6:10:d8:81:ee:22:82:3d:c7:a1:f6:aa:e5:81:ca:9c:9f:
         b2:a8:c7:01:5e:47:97:55:0d:22:61:2c:35:4b:24:a1:79:62:
         51:07:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----