Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
File:                     CiINqbbilYVbYn_qYQ4cthZGiUs.cer (raw, json)
Hash identifier:          iKDOPh8vUHu6AQv41O6tux1boQW+0rOBlZrL4He9aJw=
Subject key identifier:   0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6006D1757EDF3A7A1EE830A9F5D7B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 196754
                          IP: 195.88.248.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:00:6d:17:57:ed:f3:a7:a1:ee:83:0a:9f:5d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0a220da9b6e295855b627fea610e1cb61646894b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a4:f5:9c:82:d5:4b:28:47:4f:b7:c4:c5:16:
                    74:62:17:ca:57:cd:f2:28:96:ea:19:a0:6b:b3:dc:
                    48:fb:ec:50:04:1b:bb:11:a0:63:56:c5:dd:70:5a:
                    2e:df:41:0b:29:e4:3f:23:a3:d0:e5:e7:0d:4c:b9:
                    83:7b:9f:05:af:26:e4:76:24:1a:91:85:40:bb:11:
                    92:cc:dc:64:d3:7a:4a:3f:3e:08:e0:1b:76:52:9a:
                    9c:91:df:a3:90:7c:bd:52:d2:18:92:69:c4:21:a1:
                    64:1d:b5:b5:9a:3f:9f:6b:12:19:33:bf:7a:69:c5:
                    b1:ba:d3:90:4d:d2:81:21:37:e8:18:c7:73:96:79:
                    5d:c7:63:99:fe:2f:42:bb:7c:36:5a:12:de:1e:a1:
                    1f:46:ce:6e:1e:e5:68:ff:d3:91:2b:3c:05:68:c4:
                    96:c9:7f:df:92:77:44:23:30:ee:84:b4:aa:63:03:
                    92:95:b0:2d:ee:36:c2:8f:2a:a2:e4:78:15:a9:bb:
                    a5:54:f4:68:66:37:07:b8:cb:82:4f:b4:06:71:8a:
                    de:a2:28:38:23:a5:88:67:18:d3:4f:c7:0a:04:fd:
                    ac:c2:c4:1f:35:bf:20:ff:b3:ca:56:3f:0c:ba:97:
                    e8:60:65:f0:3e:64:9c:0c:6f:38:03:c1:8f:93:dd:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.248.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196754

    Signature Algorithm: sha256WithRSAEncryption
         90:95:56:b0:db:62:42:f6:2e:1b:cb:f6:f0:1d:fd:71:b9:f8:
         17:e3:71:57:3b:b5:c6:5f:ca:54:d8:71:78:e6:27:5d:25:26:
         b1:8d:b8:cc:eb:4d:ac:33:95:d0:2e:65:be:26:3e:e3:c1:af:
         09:bc:b2:18:26:33:a4:ac:3d:07:73:d9:5f:73:7e:3a:3a:54:
         fe:92:cf:49:7e:07:7b:a4:38:8c:2f:8a:17:ab:01:21:3f:ff:
         89:73:67:e5:d3:5c:5e:e5:ed:31:f5:0a:93:90:5f:bb:05:e9:
         a1:2a:8b:90:61:81:89:04:80:2f:e6:45:3d:50:c9:17:cd:d9:
         70:4d:b6:7b:10:b1:a6:f0:3e:2d:73:f3:47:af:f9:f8:5d:98:
         74:0b:19:d4:d6:8a:d9:43:cf:ff:e1:37:43:5e:36:94:ec:63:
         5d:2b:cd:1f:96:92:f2:80:a7:72:cc:1f:e0:d8:49:ed:d5:60:
         38:c2:77:7e:4e:84:82:1b:65:49:02:88:d1:ea:b0:b1:42:10:
         ee:41:26:1c:c7:40:d5:05:67:e2:cb:ea:b7:f3:bc:32:5f:53:
         fa:ee:d2:4f:13:92:94:48:89:ba:54:be:24:0b:5c:97:b7:74:
         96:62:b4:e7:da:0c:57:43:cb:9c:f8:3c:8e:65:20:f1:76:70:
         95:57:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----