Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.cer (raw, json)
Hash identifier:          fiZ+AB9fm2552iYNyIT08bEZSg/qcBltK07Ef0PHAkc=
Subject key identifier:   07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206851235E79BDA1BA37FCEAED207A67
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215229
                          IP: 193.192.44.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:51:23:5e:79:bd:a1:ba:37:fc:ea:ed:20:7a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:84:d6:ab:a5:15:c3:04:d8:d8:cd:c6:4d:
                    96:3a:85:39:bb:3c:cc:8a:36:36:e7:b1:dc:e5:48:
                    7d:b0:42:5c:2d:67:72:fc:c3:3e:f8:60:8d:c9:4f:
                    15:4e:16:28:2a:b0:3d:15:52:f2:3b:fb:a9:cc:67:
                    a8:9d:9f:42:84:45:49:ca:a7:ff:e0:05:0a:20:e4:
                    2f:f8:47:c5:7e:25:5c:f9:01:52:ee:0d:ce:70:54:
                    5d:4f:56:be:2d:50:ff:1f:0b:e9:5a:3e:1d:41:aa:
                    5a:39:f6:2b:f3:6f:07:ee:17:ed:ce:0f:f9:7f:d2:
                    b7:1f:ef:b6:c4:32:3d:5b:fa:83:a9:d1:b4:b6:47:
                    8f:07:ac:70:6e:be:80:8e:40:43:86:d1:e0:34:32:
                    7e:75:99:94:24:c5:b9:13:44:fe:eb:08:3d:19:74:
                    01:a4:3d:d5:f0:3b:6b:aa:39:25:c2:68:d1:e2:83:
                    e8:9b:b8:7e:9f:c7:3a:79:58:21:0a:e5:ff:f6:7b:
                    18:5c:99:ab:7b:80:ee:31:84:a7:47:47:72:28:62:
                    dd:66:b7:61:4f:f0:c4:2f:8a:e9:ce:59:04:11:7a:
                    72:b2:c7:6d:80:12:96:5f:40:cd:9e:75:2e:f6:ab:
                    4a:7d:5a:cb:6b:e1:64:6c:10:ed:dc:ec:e8:e4:4d:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.192.44.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215229

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:59:01:db:86:e2:86:c9:d9:3c:85:46:97:2a:63:8e:68:
         a5:67:18:4e:83:e7:12:0c:f2:f9:62:2f:15:ce:70:52:85:4a:
         5f:c8:14:06:54:a4:87:de:5c:1f:76:06:a2:d3:74:04:ee:53:
         87:3b:06:a4:bf:7a:a9:20:15:6c:d4:c4:11:e7:2e:35:65:82:
         95:26:6c:e2:37:8f:59:11:ce:8b:8c:79:1f:7c:12:4f:6b:5c:
         54:1c:7f:fb:8a:13:bb:13:b7:e3:43:b3:16:01:02:4a:22:d7:
         92:17:c1:ed:72:6b:43:a0:f2:be:7e:03:b0:99:57:f4:13:44:
         3a:07:ae:bd:62:62:89:ad:4e:fd:ae:1f:eb:79:f6:bb:1d:cd:
         20:d7:3c:b0:42:06:70:7b:79:f6:4c:1c:28:43:03:d2:df:26:
         6d:26:1d:a7:11:22:b7:4e:59:86:9c:0c:61:bb:d1:38:02:5b:
         d4:67:19:7d:70:81:5f:7a:96:bf:26:32:79:b8:03:c3:d4:1a:
         2e:c8:f7:53:6c:a5:2e:94:87:97:bc:6c:63:3e:8a:3f:6c:b2:
         48:92:77:c7:16:66:e6:8a:0f:9f:f2:94:ab:65:5f:97:11:02:
         24:cc:75:78:25:97:de:d7:9b:2e:48:47:0b:80:36:6c:55:f4:
         e5:61:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----