Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
File:                     F263G9VVdvRXY7retnbtWZkNOWo.cer (raw, json)
Hash identifier:          YRXWqi19UZ2BM7fzr6dyz4rwDw3boUUdw4KIaZlvf/U=
Subject key identifier:   17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252184197B9A4D66368485039A8FC494
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206020
                          IP: 2001:67c:9b4::/48
                          IP: 2001:67c:9b8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:84:19:7b:9a:4d:66:36:84:85:03:9a:8f:c4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=176eb71bd55576f45763badeb676ed59990d396a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:5e:8a:63:e0:7e:c3:14:0d:0a:9e:88:40:
                    13:33:d5:55:e6:3c:69:69:23:48:02:4b:7d:63:b7:
                    2b:9d:60:da:2b:70:91:bf:d2:8c:40:f4:26:19:aa:
                    3d:e7:34:18:d1:e2:fa:cd:be:e0:ff:da:b8:2b:d8:
                    cf:25:a6:0f:5f:6f:b9:9e:10:14:6a:c7:8c:2f:97:
                    7f:38:71:ad:f6:51:a1:fd:fd:7c:9c:ba:59:a0:cb:
                    7f:5d:10:37:9f:da:15:93:a6:b2:4c:b8:d5:b0:16:
                    be:83:48:4d:36:8c:eb:7c:2e:75:24:12:6b:7c:a4:
                    02:6f:dc:b0:5f:16:de:72:c6:67:e3:d5:bf:0e:13:
                    ff:35:8d:a1:c7:1e:63:b8:33:f3:cb:73:55:31:43:
                    3d:3c:34:f1:db:0a:e8:30:4a:fd:e4:97:ee:78:78:
                    52:f3:1d:1c:2c:6a:8c:e6:7d:3a:b8:a2:b3:fe:b3:
                    6b:97:71:d4:cb:28:76:af:8d:b8:a1:27:27:1a:79:
                    fe:cf:38:74:57:20:fc:3b:3e:0c:ad:cd:3c:c9:e8:
                    0a:0e:92:99:5a:14:fe:92:5c:32:8d:85:45:5f:b7:
                    a9:4d:68:f8:43:d9:c3:0a:4e:7a:5c:f1:8c:37:17:
                    11:ca:d2:d7:06:d7:7d:62:1b:e7:4d:07:9e:e3:a3:
                    be:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:9b4::/48
                  2001:67c:9b8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206020

    Signature Algorithm: sha256WithRSAEncryption
         37:a9:30:84:8e:7b:9b:f7:74:60:5a:2d:fe:76:e5:0f:bb:6e:
         83:b9:b9:4b:91:ef:da:31:73:dc:5e:57:aa:2c:e9:09:32:fa:
         89:a3:27:a4:84:46:5c:47:dd:0d:c6:fb:97:a4:19:49:78:c6:
         14:8b:cc:5a:a4:25:84:d5:47:31:69:f6:3a:44:75:89:11:33:
         46:8c:b9:d2:20:93:32:7d:59:f6:d5:56:51:d5:51:d4:f5:b7:
         c6:3c:c4:81:34:b4:e7:93:dd:9d:1a:2e:77:19:09:4a:47:c5:
         38:52:ab:96:82:9c:62:38:2a:f8:06:72:27:85:74:45:d5:f3:
         ff:6b:d3:2a:ad:1f:3f:8d:71:98:33:8a:13:7f:28:96:ca:d1:
         42:ca:92:12:69:f0:b7:f5:b1:75:bd:6d:0e:c7:5e:94:d0:08:
         b7:69:f2:d7:6a:93:8f:42:3b:44:26:9f:d4:5c:16:8a:69:90:
         b4:62:08:60:65:16:1b:bc:27:81:d9:0a:38:e4:e1:3d:01:9a:
         fb:9e:96:6b:91:2b:95:d4:00:f5:15:04:21:9c:3c:e0:82:62:
         83:50:60:f5:fa:af:85:05:fe:b3:1f:1a:cd:6e:d0:d3:e4:29:
         8d:67:3a:aa:77:7d:2c:b5:8c:95:af:a9:18:59:71:71:99:33:
         8b:c6:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----