Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
File:                     A5D0YbjFGyArIQDfLMQzD2kiGME.cer (raw, json)
Hash identifier:          WTtjuUtzqNzphRT6pDwjiGzVv9vuANCIX+3VqiVqODs=
Subject key identifier:   03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9C6B3D73C4F22C90E546AF918C37D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.188.134.112/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:c6:b3:d7:3c:4f:22:c9:0e:54:6a:f9:18:c3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0390f461b8c51b202b2100df2cc4330f692218c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:c7:11:21:f3:07:34:ef:61:65:0d:fe:59:
                    af:4a:05:2f:24:19:95:c7:ee:8a:3c:16:63:ba:6a:
                    60:36:aa:ed:fa:7a:b7:7f:cd:6e:21:e2:5a:fb:a9:
                    b1:15:d5:8d:0c:84:60:68:ee:b2:62:59:90:74:89:
                    69:24:79:74:09:ff:56:64:5a:4b:af:13:79:c7:a1:
                    cb:a7:90:2c:d6:89:35:f9:02:47:6f:93:53:0b:23:
                    d6:bf:db:0f:65:89:52:bb:88:25:04:1d:5e:18:39:
                    63:95:ef:22:7e:26:fa:7f:51:47:59:dc:74:ca:44:
                    a2:be:6d:f0:53:f3:fe:99:50:52:83:a2:00:03:30:
                    85:b3:cd:bd:78:a4:71:a1:32:f3:7e:19:74:44:6c:
                    c3:75:1b:20:b1:2c:80:24:a5:9a:2e:98:c5:2f:28:
                    8d:82:d1:47:4b:ed:89:8e:2e:b9:0b:59:98:79:89:
                    02:1c:90:bc:1b:73:37:bb:4f:27:97:c6:7c:05:b3:
                    12:2a:01:a4:b6:0a:90:30:59:06:ed:11:74:3b:00:
                    6b:ec:0e:76:61:28:ef:e5:f9:81:00:6f:df:71:c9:
                    12:f0:3c:54:da:73:d3:5a:ae:0e:61:ee:29:6f:b0:
                    8c:ed:09:1d:26:d0:ab:cd:8f:98:37:0a:dd:23:03:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.134.112/29

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:58:a6:ef:e0:bd:3d:b7:05:ff:0d:7f:d8:b7:d6:1e:2a:
         f4:b7:f1:e6:ec:fb:68:2a:6d:ee:6a:4c:d5:9e:de:ac:5c:85:
         f4:a7:37:dd:8d:e1:43:7a:1e:fe:7b:0a:9d:c8:13:da:be:74:
         fd:3d:1f:a8:ad:bc:88:49:ea:b9:66:9e:4f:1c:7e:5c:16:6a:
         b0:72:e6:43:37:56:0f:b0:1f:5b:0b:0b:ab:eb:37:d4:af:b6:
         00:b0:30:0b:45:bc:7d:0f:02:b9:e2:d3:de:69:3a:49:b0:ba:
         d1:fb:47:86:d8:41:d5:d9:d0:3e:90:e4:db:be:81:a3:37:90:
         26:45:bf:91:8c:e5:b4:f6:13:b5:12:ac:c3:13:b1:66:7d:f3:
         f5:c0:db:56:15:13:7a:05:e0:2a:ae:09:c4:1e:14:5b:dd:bc:
         f5:69:b6:39:d5:f4:55:3e:a7:cc:5c:69:73:2e:b8:f9:58:4d:
         f2:71:91:c3:80:57:0f:5c:34:b3:17:b5:aa:1b:5d:0c:ac:0a:
         d4:d4:c5:2e:e3:bc:c4:43:bc:ce:e1:9b:64:29:17:fe:4f:82:
         5b:70:63:ac:6a:2b:bf:fa:88:60:58:8c:a9:77:ab:09:43:8f:
         5b:0b:cc:4a:82:50:5f:49:4d:32:73:00:ba:e3:f1:97:9a:cc:
         2d:0b:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----