Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
File:                     FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer (raw, json)
Hash identifier:          M8haz9eqDL229Z+TYctKYbgLJQzqM7lGCoxgPwJffzQ=
Subject key identifier:   15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D987B6D3768CDE01D2910C4BAFDEB8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49914
                          IP: 185.56.248.0/22
                          IP: 2a02:5720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:87:b6:d3:76:8c:de:01:d2:91:0c:4b:af:de:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:af:df:10:61:64:49:76:3b:b4:a4:0e:92:
                    d7:71:14:0d:86:06:94:78:c0:3e:5f:1b:a5:57:e1:
                    e8:66:b4:c0:ef:49:3b:4d:85:63:f8:d6:64:97:f9:
                    cb:9d:c6:b9:b6:a3:3c:7e:05:18:df:29:a1:86:97:
                    5b:8a:17:1b:4b:6d:2b:ca:4d:17:32:88:51:e8:47:
                    4e:85:1b:df:a3:dc:dd:ea:18:79:6f:a8:d6:4b:31:
                    0b:60:44:40:8d:eb:d7:12:26:e6:3b:bf:6c:f9:ff:
                    bf:d1:ee:8e:78:f8:a3:f4:d8:61:c3:91:3b:d7:05:
                    5d:fa:df:cb:fb:7a:ff:53:b2:1a:1f:31:b4:eb:ec:
                    46:4d:8e:96:3d:bc:4e:47:41:4d:63:d9:cf:31:37:
                    db:9e:61:d5:9b:0c:8d:c5:cd:e8:62:03:57:c2:05:
                    64:76:ef:42:7c:68:5b:77:63:a6:de:36:43:4a:db:
                    f8:19:77:8f:6a:76:0d:ee:6c:43:17:c7:39:ef:ad:
                    8c:88:c5:b9:e5:d2:5f:ba:4a:1b:eb:33:39:5c:9f:
                    8e:f5:7f:12:28:a8:6c:3a:f0:8e:f5:3b:01:e4:9f:
                    86:99:40:c5:f2:a4:09:de:a6:d4:eb:59:5c:64:26:
                    8b:8c:6c:61:c7:1c:bc:5d:7b:42:d8:9d:40:12:42:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.248.0/22
                IPv6:
                  2a02:5720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49914

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:47:cc:a7:7f:00:e3:27:26:d3:e0:63:56:17:7b:1d:bd:
         19:9a:c0:0f:55:3b:c9:f3:fe:a8:bd:26:23:62:f2:3f:55:53:
         6a:29:11:92:01:a8:a0:9e:47:8b:01:4c:12:2b:33:58:16:6e:
         29:59:29:d6:e2:d4:83:ad:1e:6c:96:cd:1e:ce:4b:6a:d9:4b:
         38:62:76:3c:57:83:03:5e:ac:94:06:2b:92:09:44:a9:dd:47:
         7a:d6:c9:a0:4e:f3:ea:cc:78:14:be:aa:b3:76:32:73:b0:45:
         7c:bc:99:03:46:e2:1e:a7:d4:06:eb:20:7d:48:e7:7e:d6:17:
         9e:96:e8:7c:b9:97:0c:c2:8b:27:46:d7:72:99:28:38:e7:9a:
         60:33:58:d8:ab:38:ca:c1:05:9e:0c:62:cd:55:d7:ab:be:93:
         15:67:be:de:b7:e6:11:16:97:05:7c:67:dd:f3:29:45:cd:a8:
         83:56:4c:8b:b0:24:84:21:a1:92:15:c0:20:c0:41:56:72:a1:
         dc:ea:d6:5b:b7:ed:e0:82:08:45:41:2f:e0:1b:82:61:18:7c:
         ae:67:90:8d:5f:ef:78:89:cb:d0:36:b4:bb:1d:82:ee:4a:91:
         54:1d:2a:5c:e0:4f:00:a0:f1:db:52:11:2b:ce:cd:19:75:bf:
         63:ab:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----