Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
File:                     A61jZSMe15OWlAkgFJ33HAqgjh8.cer (raw, json)
Hash identifier:          9n6/ziJUD96lD3aEt0mua07LZ9kCxhqVrIpZUt0eSRM=
Subject key identifier:   03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942748395EB553E75B588F3EA562899B84
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58143
                          IP: 5.35.168.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:39:5e:b5:53:e7:5b:58:8f:3e:a5:62:89:9b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03ad6365231ed79396940920149df71c0aa08e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:4d:82:8a:2d:a7:fe:61:1b:81:59:2e:ba:
                    fd:c0:91:01:96:d7:ce:94:60:e9:8d:47:53:30:33:
                    fb:50:11:db:e6:64:62:92:09:83:78:49:2e:26:e2:
                    6c:52:ed:ef:f6:87:d9:6a:3e:b0:13:f4:59:89:02:
                    8d:cd:3b:ea:05:b8:b8:ec:37:98:e1:19:95:ba:2b:
                    a5:be:25:45:4c:28:09:40:cf:63:39:b0:70:cb:c4:
                    ff:88:05:4f:b0:9f:20:aa:eb:e5:58:43:78:25:c9:
                    56:17:3e:74:90:2d:7d:70:b5:a2:a2:e5:f3:d8:15:
                    a3:0c:74:4f:21:da:84:b6:57:0a:94:e0:98:e4:08:
                    14:73:ce:92:56:08:51:7c:e4:b4:30:27:53:85:71:
                    87:05:3c:74:56:44:a5:4e:0a:98:27:b8:25:b5:52:
                    63:bc:8a:0d:eb:11:4f:1c:13:4a:a1:6a:77:93:03:
                    df:97:c0:2b:c0:3f:d4:45:c6:f6:1c:22:0c:90:59:
                    99:30:ac:3f:73:f7:09:c9:a6:0e:65:af:2a:88:13:
                    28:b9:02:f8:5e:89:83:eb:10:63:32:2a:cb:ef:d5:
                    49:e8:c0:88:a4:bb:0e:76:b0:93:dc:b3:06:34:c2:
                    86:d3:f3:ae:72:94:72:b7:5d:20:78:79:a5:d6:f6:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.35.168.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58143

    Signature Algorithm: sha256WithRSAEncryption
         30:a1:b8:d9:3a:a9:39:34:ed:2e:85:b6:3c:22:60:cf:4f:af:
         d7:3d:7e:ac:0a:aa:46:36:d0:ae:67:36:d1:3b:2f:1d:38:aa:
         bb:e9:26:a8:6d:cf:88:bd:a0:16:34:34:fc:09:9b:ca:e4:7f:
         12:49:de:97:2e:9f:d7:13:f8:33:45:27:2b:9a:32:5e:8e:7c:
         f5:29:24:df:2e:f0:fd:f7:f6:c7:28:5e:9e:09:f6:65:11:84:
         1a:5f:c7:0b:ab:b5:34:12:28:2f:e0:87:79:b5:90:aa:b8:bb:
         2e:42:48:13:4f:d9:4e:e5:ac:e1:f7:17:a2:f9:5e:53:e9:ba:
         d0:eb:02:0e:8a:87:99:d0:16:b8:1b:5a:82:fa:03:4b:4a:e5:
         82:c6:5e:8b:d7:f2:16:14:f8:e9:1f:92:56:46:24:87:5b:33:
         24:a8:f5:93:f5:21:56:21:2c:31:55:b8:c3:84:dc:45:e6:58:
         4f:57:c3:30:b4:33:c6:5b:5c:0a:7e:2d:91:ca:87:b3:bf:18:
         95:1e:75:57:c2:5d:eb:f9:ba:aa:aa:a3:88:d2:7e:86:fe:81:
         8b:e6:ec:41:5e:72:20:7d:b0:c7:3b:96:63:9a:4f:ef:4c:1a:
         e8:a5:cc:29:f4:f3:04:91:e2:f5:2c:49:bb:73:32:b0:9d:2e:
         d7:12:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----