Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
File:                     9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer (raw, json)
Hash identifier:          GaKekawLIsJv1Zl02qfkfF+uYaY2wokE2290Shpcooc=
Subject key identifier:   F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194F4FFC95C3C880D68DCD3A473C9169C57
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 11 Feb 2025 12:33:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213467
                          IP: 2001:678:102c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:f4:ff:c9:5c:3c:88:0d:68:dc:d3:a4:73:c9:16:9c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 11 12:33:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:1b:f1:2b:95:cd:ee:b7:3e:8c:1a:2a:ad:
                    01:33:aa:f9:f2:ef:29:fe:b9:9a:d1:9b:06:ad:e8:
                    8a:f2:f4:30:60:4c:0b:80:0c:8c:30:d0:f6:7e:36:
                    e0:58:73:b4:89:e9:12:d6:8b:82:b9:b8:9d:0e:8d:
                    a9:0e:95:05:34:80:8d:c6:97:97:00:32:12:24:36:
                    c4:bb:e9:41:3d:f6:50:c7:88:f5:6b:62:cd:be:85:
                    ae:ec:bb:9d:05:b7:c6:cb:6f:8a:a4:d4:f6:d6:6a:
                    35:63:f7:e8:bf:7d:22:ed:95:14:6a:54:04:ae:07:
                    7d:78:25:17:19:96:8f:60:dc:49:e9:5a:71:45:d7:
                    25:22:0d:a4:40:10:eb:3e:b0:79:d4:fa:d8:ee:56:
                    c0:0e:01:25:0a:90:da:5c:86:79:3c:58:31:7e:78:
                    a8:e5:90:5b:ea:9c:c8:cb:b0:dd:94:b3:5d:dd:8e:
                    52:43:00:ed:4a:d6:27:97:33:f9:b2:24:da:d8:f9:
                    c0:d8:61:1f:24:bc:38:de:6c:b7:d4:06:57:2d:ef:
                    f2:25:15:0e:5e:c0:85:01:6b:1f:77:9e:76:7d:de:
                    57:bf:fa:7b:2e:45:99:78:b2:c3:3f:18:23:3a:53:
                    5e:0b:12:e9:32:df:ef:b2:b3:bf:a5:64:3d:d4:a1:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:102c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213467

    Signature Algorithm: sha256WithRSAEncryption
         a7:a6:33:f6:5c:8d:b0:cd:41:57:ef:ef:f2:13:f9:cc:2f:18:
         f9:40:c8:9b:ca:17:47:2e:5b:d1:5b:dd:b3:c4:91:04:34:76:
         e7:54:b2:4d:af:c7:f7:2b:f0:44:6e:1a:28:5a:6a:f9:4e:d4:
         6a:ba:7f:2c:a8:d9:26:6d:ef:30:fa:93:49:8f:51:76:4e:15:
         57:d9:c5:11:0e:9d:d7:99:d6:bc:6c:26:fd:af:09:1f:cd:f3:
         d4:f0:e6:11:62:2e:40:31:9a:fa:fe:5e:ca:37:94:95:fb:02:
         da:9d:fa:b6:e6:a5:c8:2b:b2:e5:ec:b9:9c:47:1c:a7:3b:ce:
         8e:e2:73:64:d9:7f:28:96:2c:fe:86:0c:0e:93:38:a1:52:dc:
         5a:36:b6:61:d7:43:03:48:a7:f3:4f:b3:59:8f:e6:5d:ad:6b:
         c8:92:2c:36:08:c1:75:eb:2c:1a:a2:10:89:15:6d:97:e6:44:
         4d:7c:0f:08:3c:0c:5c:cc:82:4d:30:de:19:8e:6b:62:dc:ea:
         d6:2c:02:8c:6d:a8:48:27:07:06:58:ef:cd:c4:99:f1:d0:a3:
         94:26:d3:84:70:1b:55:37:96:22:69:d9:a3:0b:b5:f0:d1:75:
         22:e6:51:7f:a4:60:20:76:d7:8f:96:8f:14:cd:24:49:44:59:
         66:da:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----