Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
File:                     E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer (raw, json)
Hash identifier:          U35RbW3ba97L1XMk9HAz2xgnVkFSWfggqkW+RmO+DOA=
Subject key identifier:   13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA2ADA0863E6B1DA444B7F1A338A34
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60107
                          IP: 2001:67c:5a8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:2a:da:08:63:e6:b1:da:44:4b:7f:1a:33:8a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:89:7a:c4:34:a2:fc:ae:ff:48:9a:c6:53:c1:
                    cd:90:98:93:40:56:b9:90:89:bb:54:86:01:b0:64:
                    f2:62:13:66:54:7a:41:5d:c0:8f:48:bc:0d:ee:ec:
                    73:f3:01:9b:5e:5b:61:98:4f:aa:28:37:e3:f9:28:
                    ad:2f:5d:b1:c4:16:23:2a:a5:99:80:4b:db:34:92:
                    99:54:90:bf:60:c1:ac:6d:02:b7:eb:5d:0a:54:5b:
                    fb:7d:a4:7f:4e:28:05:d1:e6:b4:5c:c2:d3:1c:2f:
                    16:95:da:32:17:10:f0:aa:69:d1:77:e1:d4:a6:e9:
                    61:1c:17:35:0d:ab:aa:75:5f:2d:68:39:f5:36:c1:
                    a9:46:69:c5:af:d0:85:ec:dd:30:b2:ee:99:79:89:
                    c3:b2:12:1d:8f:3b:09:45:ee:f1:3d:28:1d:88:8f:
                    c8:bc:9f:f3:0e:49:1b:89:77:8c:0e:b2:0c:63:f1:
                    5e:0d:51:d3:09:c4:dc:33:53:fa:6a:e0:ec:07:6b:
                    4b:4b:ca:75:80:0f:f2:8d:13:1d:8e:d5:0b:17:96:
                    30:62:fd:f3:00:f7:fe:93:77:58:b8:78:5c:86:7a:
                    fd:43:9a:7e:30:cd:35:71:69:d6:da:04:c3:be:26:
                    13:27:e3:e2:77:de:47:4b:60:bf:d6:c4:7c:fb:68:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:5a8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60107

    Signature Algorithm: sha256WithRSAEncryption
         9f:20:f7:2f:2d:a7:8a:25:c7:48:bb:fd:f2:dd:66:69:e7:72:
         ac:e1:65:c7:da:da:40:bc:94:3d:27:06:97:de:9e:8d:64:b7:
         21:9c:d8:61:9d:3d:78:15:4f:73:50:82:4b:c6:cb:d9:b0:2b:
         1c:7c:fc:67:02:db:dd:b2:17:5d:75:f5:43:67:8b:c6:0d:0b:
         85:89:ff:71:8c:57:0e:bb:71:ee:5c:20:11:7e:f0:85:27:9c:
         05:6d:99:41:3e:c0:6f:2a:01:d7:4f:97:81:47:e8:b7:a9:af:
         00:88:b2:f0:5a:ae:c2:31:ce:1e:6e:3e:90:ba:87:b1:34:bc:
         28:9e:ef:23:2d:6e:4d:8d:e3:2b:6a:76:b1:86:a9:a0:c1:8a:
         ca:b3:a8:01:bc:9d:36:3f:bb:28:8f:b9:b0:12:41:d3:d1:02:
         3e:bc:6d:15:7c:da:11:5f:90:87:3e:c6:5f:6d:1e:96:fc:3c:
         4d:17:a3:19:6f:95:0e:cf:98:6b:cc:bd:73:f6:de:2d:8d:e3:
         20:33:01:99:02:5e:25:e3:8e:a4:cd:54:f9:90:db:23:16:9e:
         1f:fc:ca:52:45:68:10:ca:48:6b:b1:ce:8d:ec:d8:1e:13:a2:
         9d:11:72:97:ac:14:47:49:5f:16:da:19:58:7c:8c:be:c8:d4:
         d4:b9:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----