Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
File:                     FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer (raw, json)
Hash identifier:          5J+ZzVl+0dNU4PhKg2nIRgTbiDgerxfyFnXSH3qZgOg=
Subject key identifier:   14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5F630E5ABB17CEF9B481E2D812D8B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34767
                          IP: 80.75.240.0/20
                          IP: 185.53.180.0/22
                          IP: 2a00:7a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:f6:30:e5:ab:b1:7c:ef:9b:48:1e:2d:81:2d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:bb:98:0e:3a:dc:b4:5e:af:70:83:ec:94:
                    23:93:f0:15:b5:8a:a7:24:b0:70:24:f0:2a:a9:9a:
                    ec:e0:b2:f4:b0:21:72:be:44:95:0d:a7:a8:ae:22:
                    c6:10:77:a9:9a:bd:b0:27:c7:a1:d0:b6:14:15:57:
                    1e:91:5d:5b:c8:1e:ff:b6:41:b5:ca:44:ba:19:a4:
                    0e:c0:9f:2a:23:fb:69:a7:63:65:e2:2e:82:2f:db:
                    66:5f:d6:00:85:4b:a2:7c:be:2e:7c:77:7c:8c:d4:
                    06:fe:63:97:24:92:76:16:0b:e5:01:87:26:95:0d:
                    83:50:cb:c0:2e:8d:d0:56:71:44:e5:df:b2:d2:f4:
                    65:22:90:54:0a:8c:f0:00:82:18:0e:27:c6:d4:11:
                    37:87:84:c5:64:f8:21:15:bd:8b:68:ca:ba:d9:46:
                    2e:36:8b:d4:e8:c9:44:74:c8:44:14:e3:8b:66:1d:
                    a6:d9:bd:9e:87:62:5b:a3:58:c4:a4:e0:f5:ed:08:
                    c5:a4:c2:43:bc:98:f8:80:c7:b5:b0:7e:3f:64:6c:
                    13:96:ef:e6:74:89:8b:3b:76:6b:b5:68:1b:26:9b:
                    86:83:02:ed:0c:e0:ec:96:5a:6c:5b:30:4b:80:9d:
                    88:fa:20:06:a5:d6:d6:53:d6:b2:83:47:1c:7a:df:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.240.0/20
                  185.53.180.0/22
                IPv6:
                  2a00:7a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34767

    Signature Algorithm: sha256WithRSAEncryption
         9d:f5:d6:8a:cb:11:c6:cc:33:27:14:32:47:38:1e:17:56:30:
         47:a1:92:12:56:b2:88:5d:9f:03:35:d9:34:4f:4a:3b:f8:4a:
         93:ed:70:0c:ed:f5:93:d6:51:92:14:3a:c7:fd:0d:13:de:94:
         79:c8:2c:89:d9:a1:aa:fa:00:16:33:01:10:b9:7d:a3:de:43:
         de:4a:af:c1:1b:d1:34:61:4b:2c:7e:d4:7d:0b:e1:90:58:b9:
         bc:07:02:ca:9d:94:c1:5f:b9:73:ea:b5:97:4b:fc:e2:e6:5a:
         74:2a:26:76:fc:f5:6b:fa:48:a9:74:dc:91:49:04:96:e1:7b:
         71:18:43:e1:33:12:a1:d2:a4:61:86:f5:e2:31:5e:f0:f6:75:
         5f:93:38:71:1d:a8:2f:c7:d7:b3:4f:63:23:cc:14:58:45:7f:
         3d:f6:8a:2c:f5:8c:63:c5:d3:10:7e:00:7d:aa:32:8b:e7:e9:
         66:c6:93:2d:70:66:a1:58:33:37:b2:af:19:38:89:b4:93:0e:
         d3:91:b4:4c:f5:99:2e:53:a0:3b:7f:18:33:7f:aa:78:90:70:
         c2:43:f9:9f:5f:2f:fb:8e:cd:4e:46:7c:79:2b:0c:c8:2a:3c:
         10:6c:8a:0c:5b:6c:cc:b1:db:e2:91:5c:fb:2e:3b:71:cc:2d:
         b2:b9:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----