Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
File:                     735cdfZIrGkrFLwiLiwYDIY7ReI.cer (raw, json)
Hash identifier:          +6SaxxS5bj7chJX0F2VavSDYlIoKoR2xgZf0qjyHpTM=
Subject key identifier:   EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425219C7D79D5A58B6FB101666BB41A4C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213852
                          IP: 2a13:bf00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:9c:7d:79:d5:a5:8b:6f:b1:01:66:6b:b4:1a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:f4:ba:a5:cf:1c:9c:fc:0b:5c:9d:33:ed:
                    8e:07:7c:70:98:54:c6:64:dc:ae:64:2a:6f:24:96:
                    d8:05:df:c9:a5:fc:95:44:a2:d2:cb:e8:d4:e7:2c:
                    cf:ee:67:95:ba:79:0b:c8:ed:2e:3c:8f:59:44:1d:
                    09:d8:73:f6:c0:14:d3:f5:c6:45:ad:7b:ea:04:15:
                    22:0f:35:0b:cb:0b:33:0c:ab:4e:81:09:86:25:f6:
                    2b:75:d9:ea:99:d8:e4:df:0e:b2:1c:9c:db:2c:ca:
                    1f:2e:b2:74:76:a7:fd:46:a0:2c:54:2a:00:73:da:
                    d8:4b:4c:ad:c0:7d:1f:66:2f:3b:9b:a1:fc:0f:de:
                    76:6e:cc:14:fc:79:57:93:a1:85:17:3b:e9:ba:bb:
                    e1:26:47:5b:3a:8b:41:e5:4d:bf:f2:28:d5:99:0c:
                    e1:b3:42:3a:a2:14:24:3e:7e:67:eb:da:c5:25:f9:
                    e1:a1:cb:4a:4f:af:ee:35:4c:56:04:7d:d3:01:af:
                    8d:72:4d:f9:d9:1b:cd:db:e5:d0:dd:96:12:96:a8:
                    c0:ce:f4:a7:a2:44:99:c3:da:6a:89:9b:5d:74:4a:
                    2a:a9:13:b3:bc:1b:79:e4:2e:f1:f4:4e:83:01:62:
                    98:81:b0:ec:b4:a1:07:73:d0:e9:81:51:7a:7c:cf:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:bf00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213852

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:eb:0e:c6:78:4c:6e:89:a7:f7:07:f8:62:65:82:55:ba:
         79:e5:45:34:b4:a3:34:5f:d9:a4:81:cf:96:26:4d:1e:46:89:
         dc:89:04:c7:71:7f:81:2f:c8:7f:f9:5f:20:5d:e1:ab:39:60:
         cf:12:8e:76:1f:74:99:e0:71:d0:de:89:8b:d7:e8:a8:cb:46:
         96:78:31:ac:5d:51:35:cf:17:17:81:7c:9b:cc:b9:c2:6b:30:
         77:77:0a:01:d1:2b:5e:e1:5f:a8:d0:62:93:33:3c:65:37:4f:
         08:f5:a8:24:a0:2e:54:dc:04:a5:b1:d5:98:1b:d3:d0:62:d0:
         cd:ad:1d:1a:84:16:fc:62:ce:f6:e3:47:ed:71:d2:08:04:3e:
         5f:1d:b6:79:e9:04:3a:3f:7f:11:bd:93:cb:78:16:f7:2b:4d:
         c6:d9:7d:86:a5:35:bc:93:0c:4e:53:48:36:ff:b3:1c:4a:81:
         52:c0:0f:9b:67:0c:b7:1f:2a:73:23:95:6a:67:82:7d:63:7f:
         91:f5:cf:38:c6:ae:88:e0:d6:62:9a:3e:aa:05:18:99:de:58:
         e9:d8:53:55:33:22:c9:b3:4e:19:73:89:e9:ee:ac:60:91:41:
         6d:1d:a0:01:79:15:66:0d:e3:0a:b5:4a:a9:4f:3e:77:eb:1a:
         38:c8:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----