Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
File:                     A5aaE8t8Nxi9NxdxJijnqxszsKU.cer (raw, json)
Hash identifier:          5U0EptvPSo9Dh+CMScK/d53b6ReJj36QKqk23tV4YHg=
Subject key identifier:   03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BD61CC518ABC26649ED29D5CA8406
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49326
                          IP: 80.244.0.0/24
                          IP: 2a13:7340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:d6:1c:c5:18:ab:c2:66:49:ed:29:d5:ca:84:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:ad:5d:d6:f9:af:f5:2f:25:d0:a7:c2:3c:
                    fd:0d:ad:c4:9e:ba:2f:59:fc:9a:2b:4f:50:f2:41:
                    7d:b0:a5:a5:36:54:a9:4e:e5:6a:78:f1:1b:e9:8e:
                    7b:0d:4f:99:ee:7d:8a:1d:69:85:87:b0:55:92:69:
                    e4:3e:8d:1e:1e:b1:eb:89:c8:d6:30:8f:e8:f0:9f:
                    3b:99:e8:fe:db:38:8f:a7:55:b7:20:1a:8f:8f:11:
                    ac:b3:41:80:5c:8a:97:36:bc:98:9e:9a:4f:22:2c:
                    a5:57:cf:63:a4:0f:29:86:3d:36:7f:69:84:1b:cd:
                    4b:82:cf:29:98:2b:de:38:e9:c6:fc:5d:0e:e9:d4:
                    b4:63:25:b5:b8:70:ca:5f:3f:f2:49:0e:98:f3:3a:
                    e7:1e:3f:7f:d1:a1:70:2c:62:95:a5:f4:06:9f:5d:
                    db:70:3a:af:7f:d7:c2:b5:ad:9d:bf:a5:2c:8d:fd:
                    06:b5:f3:a7:92:06:3c:5f:85:06:33:00:c8:d8:a3:
                    1d:d3:4b:27:59:5b:0d:8d:53:5b:0c:98:51:27:21:
                    9e:2b:3d:c3:d6:cc:c8:34:32:6f:b8:4e:47:6b:02:
                    00:16:5a:cc:5c:a1:66:2d:52:1f:cd:36:49:f6:c3:
                    51:95:03:9c:bb:09:64:7e:bd:5d:87:cc:86:1f:66:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.0.0/24
                IPv6:
                  2a13:7340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49326

    Signature Algorithm: sha256WithRSAEncryption
         39:d3:88:95:cd:b7:79:60:c1:b2:57:43:95:56:77:1c:3a:31:
         22:3f:5f:8d:b2:66:26:b8:d8:38:2b:31:e5:c9:c4:d4:df:43:
         e5:49:af:7f:d0:e5:03:3f:78:f6:f2:37:e8:42:96:af:1e:1d:
         4b:bf:ed:db:65:6d:ad:ca:87:be:3a:e4:67:af:32:18:8b:da:
         ba:7a:a2:02:7a:df:b3:08:86:5b:e7:b3:5a:c8:92:3f:a2:7a:
         62:79:19:aa:50:03:3c:20:64:a1:85:2b:e1:89:25:e1:34:40:
         ce:6b:fb:e3:62:84:2a:70:4a:55:2b:92:75:f2:9b:bc:fc:4e:
         73:30:3f:c9:5a:aa:fd:d2:79:05:ab:2b:43:0d:64:c3:c6:26:
         86:b9:7e:58:ce:0c:b1:69:31:4c:0f:0e:7f:ee:c5:d2:41:ff:
         ef:83:26:ef:55:da:3b:46:d4:b1:78:b6:e4:22:6d:02:ec:8a:
         15:23:3e:34:26:4c:b7:9c:1c:f2:ab:53:20:e7:05:f0:0b:c2:
         1d:5e:ef:00:de:8c:62:59:4a:83:4f:03:7d:88:0b:5e:50:d0:
         9d:7b:35:54:e7:ae:a9:10:b1:b3:29:0d:71:83:0b:97:ab:da:
         dc:26:a5:e3:ee:95:ff:02:fc:1f:b5:b5:b4:ff:55:b1:5a:2e:
         fa:8e:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----