Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
File:                     7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer (raw, json)
Hash identifier:          /o8YQ3OphDtzW9hHdQjh27Gwradzsx6Up9cGm2qKOjA=
Subject key identifier:   EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444957BB6083B2EA7310B11D505E295
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57113
                          IP: 146.66.8.0/21
                          IP: 185.214.56.0/22
                          IP: 2a12:3780::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:95:7b:b6:08:3b:2e:a7:31:0b:11:d5:05:e2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:b7:db:fa:79:9c:43:a8:4b:6b:69:66:38:
                    52:8b:ed:e2:88:c3:47:8f:57:43:e6:a8:7c:cd:ca:
                    25:71:d0:a8:6c:03:f5:ae:b5:73:18:2b:0d:ba:70:
                    29:1e:34:7b:58:99:8e:73:de:b7:60:f7:02:c2:c3:
                    f2:57:68:a6:59:e1:0f:b9:0a:f4:59:c5:bf:65:cb:
                    25:f6:8c:af:de:ca:5d:7e:11:2b:b2:85:54:7f:3e:
                    c9:97:4a:bf:de:a0:64:36:94:f1:6b:11:42:35:3b:
                    b0:0b:a3:a8:0a:a0:04:3d:d6:8d:9c:74:7c:95:47:
                    0d:7d:b0:2d:b9:ec:ae:29:23:bc:ff:a5:46:27:22:
                    e8:92:ba:1c:63:cc:1e:bb:e0:e6:e0:f0:9a:78:97:
                    ec:5e:4e:e4:da:15:60:67:3a:d8:29:72:a7:42:ee:
                    67:02:f4:19:ad:c1:bc:dd:f3:c5:29:fc:fe:88:b7:
                    e9:54:5e:8e:bf:3d:5b:cd:74:5c:eb:02:fe:dd:61:
                    95:c8:d7:05:2d:7f:f7:d5:14:e8:9c:6f:7d:ba:2e:
                    c7:ed:b9:9b:e5:38:38:c4:da:d4:2d:34:9a:74:2a:
                    7e:35:e6:b2:35:31:3c:c3:40:e0:66:27:51:4f:5f:
                    6c:3a:f3:49:aa:b9:40:8f:a5:e3:4b:a9:c9:ee:49:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.66.8.0/21
                  185.214.56.0/22
                IPv6:
                  2a12:3780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57113

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:58:8e:4d:3c:89:21:df:a6:a4:82:3e:4e:34:c0:72:be:
         88:c1:ae:72:4e:17:ea:f3:08:4e:64:68:ae:7a:15:2e:3f:28:
         3d:50:dc:31:27:80:7f:dc:a3:0a:3c:c3:b9:21:0e:0f:29:76:
         5e:60:2d:5f:5f:d5:c4:e2:cc:07:43:f2:b0:9b:b7:06:5b:e7:
         b7:aa:da:71:c8:99:59:4f:6c:22:07:51:8c:5f:88:06:9d:0f:
         6f:37:d7:69:5b:15:72:c8:37:4a:13:76:bb:53:a3:c4:00:fe:
         c2:68:f4:11:dc:1c:ce:b2:05:b8:96:f0:ee:57:0f:12:16:cf:
         e2:01:76:e5:a2:a6:fa:19:df:04:4b:e0:73:e0:38:81:0b:7e:
         34:04:7f:cd:81:46:76:77:28:3e:7c:d6:d8:3c:32:d6:29:a3:
         5b:fc:dd:22:69:3c:a3:39:78:06:87:7b:b4:5d:d0:f5:3a:c1:
         60:73:3e:6d:d1:23:42:11:05:54:d4:a2:28:a2:6a:69:52:fc:
         7c:8f:06:bc:ad:a5:ee:9d:67:79:38:14:0d:75:de:86:93:f5:
         a3:80:88:c5:a1:1f:24:ab:9b:2f:18:c5:a9:4a:28:d6:a9:d2:
         15:8a:c0:a5:2d:e4:d9:f3:0d:4d:81:d8:23:1b:e9:44:df:da:
         20:06:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----