Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
File:                     BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer (raw, json)
Hash identifier:          R2hIti6gqYRTLawLCWDQ2bQlJvUo6z9N839RIBMcsuA=
Subject key identifier:   06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6120B02CEC2F243C1D388422CF845
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59695
                          IP: 5.152.248.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:12:0b:02:ce:c2:f2:43:c1:d3:88:42:2c:f8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:54:12:41:c1:e5:9f:6b:fa:ff:d4:e8:94:
                    c0:b4:e6:11:03:33:a4:b9:c6:2e:91:c0:42:23:3e:
                    fa:c6:02:f2:a7:e4:14:e2:06:63:5e:01:be:d7:06:
                    3f:f7:25:73:d7:06:ee:d4:b1:eb:d3:ac:57:dc:e2:
                    fc:0e:b6:69:80:19:9c:10:d3:ea:6b:8f:c5:24:7f:
                    fc:1b:30:73:fd:6c:1b:58:d9:e1:2b:1f:0a:7e:6d:
                    1c:de:c5:fa:d8:d8:ac:f0:69:99:93:a4:e3:e6:cb:
                    e7:65:44:5d:37:22:b4:31:df:dd:f7:03:54:63:ea:
                    51:61:fc:f6:03:2b:14:4b:f4:28:a8:55:d1:bb:7c:
                    03:19:e9:2a:0b:40:a8:eb:ca:51:25:7b:e8:af:43:
                    91:9b:f9:d4:08:97:8b:73:38:34:22:ab:1b:de:7f:
                    e6:3f:6a:bf:e9:73:f1:3b:2b:75:5e:b4:a2:25:3b:
                    c9:77:b8:76:d0:d8:a2:f1:46:4c:8a:b9:b7:3a:dd:
                    b5:45:48:31:6e:f7:1b:bf:1a:8b:18:4f:b6:69:f9:
                    b0:7c:95:7b:23:c3:05:42:d2:9c:65:6f:4c:ea:1d:
                    a7:83:61:ab:a9:d3:6d:6d:58:ec:44:da:d5:66:63:
                    6b:58:be:9f:e7:7d:8d:fe:f2:7b:66:fb:b0:bd:07:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.152.248.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59695

    Signature Algorithm: sha256WithRSAEncryption
         05:81:2d:d6:9c:34:71:22:29:6d:af:b5:f5:be:c4:0a:b3:c7:
         10:c9:68:df:49:e6:b4:ac:ff:84:e8:69:92:ef:d1:c1:d7:58:
         85:e0:fc:26:27:d2:b4:a9:43:b9:ea:0c:f3:15:5c:6d:d0:20:
         94:4a:f8:54:65:5d:d7:61:9f:56:8d:69:6f:35:04:ef:49:dd:
         7a:f4:0b:d7:3b:69:b0:7e:88:41:10:e6:c2:fc:6f:cb:3c:38:
         3d:04:8c:3b:ea:4c:33:6f:cb:51:aa:21:b4:4f:c1:c3:48:e6:
         1c:7e:ef:6f:1a:ae:c3:29:be:17:eb:3e:6b:03:c8:1a:d5:e5:
         1a:27:1c:30:56:9c:29:a2:be:c9:2d:53:64:42:98:e2:09:e6:
         fa:5d:ec:66:81:66:7d:8e:b5:f7:39:9a:d9:87:f6:dd:10:b3:
         3d:4b:00:9a:76:3e:0b:f8:3e:47:92:ce:fe:26:02:d4:92:49:
         fc:28:fb:46:21:e8:a3:44:b4:e2:d4:4a:b9:3f:50:e6:68:3b:
         da:6f:4f:1f:27:b5:dc:e9:5c:fb:b0:74:cd:7f:fa:e9:67:25:
         c9:eb:85:ce:dd:4d:99:f7:71:1b:db:f8:27:ea:1c:44:44:c3:
         b8:68:06:33:f0:28:25:18:2a:9e:3d:a9:f1:d7:47:9e:f4:54:
         05:0b:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----