Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
File:                     F43VHX5As0tDn4_fTQUUEcU0cuo.cer (raw, json)
Hash identifier:          fDxzJ9mCFy/Kj730CCV7cij58cDjbrblm3frnK4Nwws=
Subject key identifier:   17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F40D17CB5F7AF151EBE9D1AC7CF01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 24593
                          IP: 193.110.162.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:40:d1:7c:b5:f7:af:15:1e:be:9d:1a:c7:cf:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:d2:c6:46:21:d6:f1:41:1a:da:95:2f:56:
                    37:a6:22:5d:02:39:52:7f:4b:2d:4f:1d:f3:9b:13:
                    df:83:0d:46:28:24:a3:65:d5:e8:74:dc:fe:48:08:
                    b2:0b:1b:f5:7e:d1:76:41:2e:8a:91:9f:5f:53:e2:
                    9c:e6:37:9a:e5:36:84:fe:f9:a5:75:11:81:69:40:
                    5e:8d:7c:3f:6f:e0:89:c6:80:c5:3a:b9:33:2e:54:
                    03:f8:54:47:87:b5:c6:6c:a5:a5:bb:55:3c:c5:1f:
                    a8:18:5e:a1:d4:b6:75:7f:17:99:8a:09:2d:20:5e:
                    7f:79:30:57:df:ad:67:b2:e7:26:c7:f1:8c:7b:c2:
                    74:26:5f:5e:0a:87:59:5d:a8:aa:63:84:0a:60:c0:
                    82:f0:8f:3f:66:79:34:20:bd:58:6d:46:b3:b0:c6:
                    f7:c0:89:c1:83:cd:5d:fc:22:10:81:e8:73:60:9f:
                    68:88:94:43:50:24:9b:30:f7:4d:7f:47:1d:d4:a4:
                    8b:72:f5:c6:16:2e:c4:8f:9f:ae:d1:53:4f:1a:0f:
                    18:77:db:83:ce:28:b9:32:48:70:5f:ae:c0:56:85:
                    29:67:86:26:6d:fc:64:a6:69:f6:ee:eb:cf:a5:20:
                    0a:a8:69:b8:ac:c7:53:8f:f9:d3:22:df:62:ee:99:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.162.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24593

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:44:c0:f9:bd:df:40:18:2e:de:95:0c:b1:78:61:f6:35:
         65:8b:06:87:ed:d0:75:90:b6:d1:c0:f1:d4:a3:7d:30:40:55:
         c9:56:3b:09:e0:61:cc:ff:d7:04:9e:c4:53:10:f0:37:c5:27:
         28:b2:d3:e7:25:60:0f:dd:85:22:f2:bb:ef:b9:09:bf:f6:15:
         13:32:c8:df:58:62:41:ea:77:a1:ed:26:47:c7:d1:72:05:79:
         8a:59:23:62:da:7a:cf:b2:49:48:fa:98:2f:94:fb:ab:ad:6e:
         9b:2f:6e:c7:b9:d6:f1:af:aa:42:4a:05:8d:50:9c:f0:22:c6:
         e6:c8:fd:46:20:77:b6:a4:57:f4:da:97:9f:ee:1e:8f:8a:11:
         97:93:e0:3e:7d:39:93:9b:df:9b:89:a2:1c:b0:53:c9:11:41:
         0a:c0:bf:1a:a7:fa:ea:72:c9:71:63:00:50:4b:d8:70:8f:bd:
         2d:21:29:a7:2d:60:75:95:5c:a2:e3:54:e2:a6:54:38:0c:75:
         4c:67:bc:cd:8c:97:65:89:00:d3:f1:47:02:fc:01:d0:1f:b1:
         9d:54:b4:fe:60:4d:95:68:c4:aa:f1:5c:da:87:d4:ca:96:66:
         b2:4d:b3:6a:4f:14:21:f6:bb:96:4c:5d:ee:2d:e1:31:60:dc:
         62:83:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----