Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
File:                     BGK247pQCQLmPuFOXKyREoMqLCc.cer (raw, json)
Hash identifier:          ysowFwfPRMDjZ2oppp/g/1FrIBFtPzX4IGWsZVrHppw=
Subject key identifier:   04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01955C23CB89B9844926BA67408A45B44A22
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 03 Mar 2025 13:13:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212500
                          IP: 2a14:9c80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:5c:23:cb:89:b9:84:49:26:ba:67:40:8a:45:b4:4a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  3 13:13:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:e3:a4:6a:b4:ed:b9:d8:39:b9:c7:b0:81:
                    f4:f5:a8:d9:a0:1a:06:ca:c2:57:31:cc:60:68:a8:
                    92:90:51:1f:60:63:f8:e2:68:23:8b:ec:50:7a:49:
                    27:e3:8a:dc:09:0d:be:ec:67:58:08:4b:d6:d9:c6:
                    4b:fa:a3:11:02:9a:99:82:a8:b5:33:3e:ed:15:6a:
                    cd:22:ca:47:c7:bc:ef:a2:b0:ef:d6:fc:f8:cb:a2:
                    bf:33:4d:15:2f:ad:14:0b:8b:c9:f0:4c:b7:05:1c:
                    2e:15:7a:32:81:ed:d7:0a:b4:77:f6:63:a5:37:25:
                    43:5e:89:a2:dd:4c:d3:38:9f:b2:96:bd:c9:27:d8:
                    72:0d:ac:65:d6:58:bd:57:e7:52:15:a5:dc:40:7c:
                    c1:15:79:f0:f7:9d:2f:c1:6f:f7:c1:8a:ab:4f:3a:
                    a7:dd:ba:80:43:3d:01:91:44:6f:de:27:2b:37:0c:
                    76:02:82:ba:f3:07:e8:2e:49:33:d3:e1:be:72:94:
                    92:05:1f:9b:14:2a:2c:b3:b4:42:07:9b:96:ae:bf:
                    62:23:ae:7b:d1:e1:ad:1c:0a:4a:25:ee:9e:49:5e:
                    2c:b4:8a:b6:03:17:e9:c9:31:02:c5:27:e9:6b:f4:
                    19:76:fd:6b:e7:a9:bf:c7:45:11:dd:9b:e1:bc:a0:
                    89:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:9c80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212500

    Signature Algorithm: sha256WithRSAEncryption
         7b:e6:a5:89:66:e7:c9:8f:cb:05:39:68:e0:0c:4b:f2:3a:8d:
         4b:fd:3b:ce:17:df:21:47:06:28:b9:7c:7a:c8:9d:07:f8:63:
         43:03:da:58:80:b6:37:b6:20:b3:f8:80:dc:2e:a7:53:77:c4:
         8a:85:46:f2:5d:35:9c:0a:d4:c8:40:e4:c5:b1:ae:da:b4:02:
         3c:ae:7f:8f:50:63:a2:ed:ef:8e:e0:11:00:2d:b6:84:7c:75:
         19:cd:89:4b:62:a5:dc:6b:80:02:2e:9e:58:53:8d:fc:bb:09:
         e3:02:4a:0d:49:82:86:fc:44:69:4c:a0:99:94:a4:84:47:12:
         88:23:06:35:29:ff:87:11:9a:ab:4e:10:1c:b2:1e:ff:0e:b0:
         9b:9e:1c:46:30:3e:8b:3f:48:bd:1c:d0:b7:91:ca:b3:5c:22:
         b6:cf:77:43:e2:f5:29:65:7a:df:a3:a7:6a:52:16:5d:f1:fb:
         6c:c6:48:74:12:b8:7e:02:82:61:bf:32:72:9f:1f:78:88:4d:
         ff:9f:a9:3d:20:1b:2f:28:3a:e3:bb:1c:55:f1:a3:ab:48:57:
         54:9d:80:80:38:a2:4a:2a:af:c9:b6:8b:d7:6a:9d:72:3d:2a:
         95:73:7b:30:a7:32:3b:ef:85:48:6b:11:81:94:2c:c1:4f:c7:
         d0:1d:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----