Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
File:                     CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer (raw, json)
Hash identifier:          TubFA0+1ZXccw+WwamFEbfh7r9Xy3OYvdFh9WH52yk0=
Subject key identifier:   0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B205B6B22F37FF52821775A0C1DAF7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208272
                          IP: 2a0b:7980::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:05:b6:b2:2f:37:ff:52:82:17:75:a0:c1:da:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:e2:90:76:39:12:8f:72:72:34:5b:27:b0:
                    e7:04:03:f5:ca:40:27:7a:86:c9:25:b0:64:f2:60:
                    88:5c:12:13:b0:20:d1:2f:ba:ff:fc:bf:58:82:4e:
                    00:b4:31:a6:f6:ae:4c:0f:8c:30:ea:fe:2d:04:89:
                    8a:20:7d:b8:e8:57:66:33:27:ef:56:48:b0:ca:28:
                    3d:41:ea:42:3d:db:b5:0f:91:28:5e:ae:ca:c5:82:
                    0d:e6:62:e3:f4:18:ca:d0:6a:11:2e:25:2f:d8:95:
                    08:90:8f:1a:71:78:89:d2:0e:e1:90:82:ac:59:ee:
                    74:74:a4:23:c4:f1:e9:b1:f2:29:cc:67:ee:56:61:
                    60:54:ae:29:5b:7b:92:ae:d0:e6:41:ef:a5:30:45:
                    65:63:a3:68:9a:dc:45:15:57:a5:fc:fc:41:a9:a0:
                    28:83:f3:23:da:e1:ee:2c:d8:91:0b:41:bd:13:6d:
                    ad:0a:25:4c:9f:94:57:4a:15:e8:f7:82:e4:6b:db:
                    23:02:88:96:0a:ba:a5:05:a1:38:04:54:36:26:76:
                    e8:bf:56:80:ea:ae:ab:b9:5c:46:c7:ad:2a:28:23:
                    e7:5b:79:e6:a1:81:cc:6b:24:12:ad:83:73:70:93:
                    8d:d7:73:b5:51:97:78:6c:f1:92:db:51:49:b1:9d:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:7980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208272

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:5a:18:10:4b:b0:1f:5e:0f:5c:34:a6:0a:8e:14:0a:43:
         ec:92:75:97:d0:84:66:8d:f4:65:d7:f6:48:5c:b3:66:95:f5:
         51:cc:e1:af:60:0e:78:83:3b:97:8a:89:0f:d5:fd:c4:03:3a:
         15:b5:77:d0:2c:0e:be:de:c8:97:71:b7:42:f6:64:44:a9:06:
         7f:59:c8:56:fb:92:47:2d:48:c8:d5:92:80:83:2f:90:5f:a5:
         e0:f9:ca:24:a3:d7:5d:5f:5f:98:c1:ea:66:9e:a8:a2:ee:98:
         e9:01:c0:d5:57:ad:5c:57:b2:d3:00:a3:b9:8d:be:60:70:6d:
         29:0f:16:dd:24:9c:50:7c:43:38:0d:28:24:4c:5a:3b:43:03:
         c0:64:16:97:63:3a:3e:05:3e:d3:dd:4f:1a:b0:2e:45:c0:0d:
         1a:14:0e:0a:6b:cf:0c:79:56:36:6d:b0:d1:45:97:ea:63:97:
         a1:e0:c9:dd:42:a9:fe:e4:ae:6e:a3:da:56:7d:23:2c:5d:4c:
         42:87:bf:37:9a:bc:1c:df:0a:2e:06:4d:2d:42:f8:db:75:42:
         86:98:9f:28:0b:16:50:88:07:53:da:75:64:6a:73:0a:bf:ff:
         3c:90:1e:31:45:8b:12:fd:ad:2c:9b:af:2c:1b:c4:8d:1b:3e:
         d5:71:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----