Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
File:                     ABCrc5F2m18sVOM8i1p9-fN6M6g.cer (raw, json)
Hash identifier:          RpqeFCLlREZT4HI+8sVAdQrSXCHAfRjYSo5MqkMBY4w=
Subject key identifier:   00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427480A006E3CB24A165C4D419EB29AF0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47829
                          IP: 2.58.236.0/22
                          IP: 193.176.236.0/24
                          IP: 2001:67c:2c8::/48
                          IP: 2a09:ed40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:0a:00:6e:3c:b2:4a:16:5c:4d:41:9e:b2:9a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:3f:27:d4:6d:a7:80:9a:85:1c:b2:87:bb:
                    7b:74:50:3d:37:a4:c3:0c:7f:37:29:83:35:95:00:
                    3c:30:ed:52:d1:c5:ca:88:89:19:ad:de:7e:c5:4c:
                    ea:ee:2f:2f:4c:98:0f:06:b5:b7:59:a0:f4:2c:5e:
                    9b:0f:b3:64:c5:d5:c9:02:44:f7:56:eb:23:ce:4f:
                    7f:d2:51:a5:a6:ea:e8:a0:fb:68:21:00:0f:33:ce:
                    05:0c:1c:62:c3:8e:f6:e3:3a:66:d9:43:64:31:0f:
                    da:91:ad:52:12:d4:5d:62:c8:fb:49:d3:3a:35:fa:
                    52:28:9e:e2:ac:75:b0:54:72:58:6f:39:c3:ce:f9:
                    c0:b8:57:09:7d:6f:54:a6:a2:8b:3d:22:23:2d:41:
                    38:1e:59:c6:eb:61:cf:0b:15:84:80:3d:d6:99:91:
                    97:04:9e:87:78:ad:fb:bf:08:be:a1:4a:89:b9:99:
                    e3:2f:77:6e:11:c8:1a:84:32:10:0c:af:bd:2d:87:
                    07:69:7a:b8:b8:3e:81:c0:fb:22:d6:7a:a8:eb:0c:
                    6c:b8:b2:20:0b:5f:d0:91:34:a0:bc:14:ef:4d:85:
                    3b:17:df:c3:f5:38:79:0d:16:10:3d:9b:69:74:48:
                    2f:d5:55:7a:5c:72:fb:77:c0:98:d3:a1:d1:0d:94:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.236.0/22
                  193.176.236.0/24
                IPv6:
                  2001:67c:2c8::/48
                  2a09:ed40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47829

    Signature Algorithm: sha256WithRSAEncryption
         29:99:cc:3c:0a:ce:28:bc:6e:f2:dc:f9:dd:51:df:4a:bd:7d:
         86:40:08:43:63:a5:f7:41:0e:d1:9a:87:b9:4b:07:52:d1:ea:
         c6:f9:46:69:d2:27:db:d7:19:27:8a:8e:1a:3b:1a:70:98:bf:
         d9:ab:07:9a:c6:37:16:44:e9:2c:64:30:10:77:6a:31:16:6a:
         12:c2:b4:74:6d:5f:2c:c3:9d:31:c3:e8:b5:99:b4:c4:00:a6:
         83:93:5d:4c:f9:0f:0a:a5:47:9f:93:c1:6a:0c:3c:21:cb:34:
         4f:84:a1:5c:9c:bf:91:a3:bd:e5:44:f6:3a:01:d1:c4:e0:cf:
         8a:44:04:bf:dd:37:60:6c:53:ea:f8:46:fb:3b:86:f1:73:7e:
         fb:80:2e:b7:48:7d:36:b7:17:f1:fd:a5:80:99:62:d0:75:6a:
         1d:eb:e3:11:60:36:be:7a:91:68:40:ac:e6:0b:c9:de:ea:ac:
         c3:6e:c3:52:d8:43:ad:a8:3e:3d:34:c0:71:b3:2d:bc:6c:40:
         a5:a8:96:31:9a:4f:40:c9:00:d1:01:a2:d8:7f:ff:91:19:4a:
         cb:66:a3:b9:4d:86:40:53:e0:a4:03:83:e6:6f:20:75:0a:c2:
         be:4d:4d:0e:8d:e6:4a:5c:ef:ce:13:54:63:4a:ab:b6:96:e6:
         4d:0c:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----