Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
File:                     Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer (raw, json)
Hash identifier:          FObbkqUPeq+Wsh7RT3uZWqCju4Sg+KUaVTtfDsXJe44=
Subject key identifier:   15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420684641269E6A337C417D7C82CC45FE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50766
                          IP: 185.51.21.0/24
                          IP: 2a13:dbc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:46:41:26:9e:6a:33:7c:41:7d:7c:82:cc:45:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:c1:a8:71:03:96:d9:d3:58:a0:cc:d9:83:
                    be:92:f6:ba:37:90:e5:f0:9a:39:03:a2:11:77:bc:
                    43:ba:fe:3b:65:19:65:68:50:7f:fa:42:cf:6c:c7:
                    35:88:3a:11:d3:e6:b6:d8:ca:b8:bb:ef:42:97:70:
                    49:55:99:4e:8e:a5:c2:a3:e7:ae:7a:9d:f3:a3:c5:
                    45:40:12:50:43:ca:e0:0f:b4:e4:29:d0:67:a9:df:
                    bd:7a:45:3f:26:96:10:9e:d2:44:5f:0d:9f:5a:6c:
                    5e:0b:46:ec:b1:76:43:dd:2f:a1:ed:1f:00:c4:28:
                    46:0c:96:eb:c3:fe:67:c2:2d:66:58:db:3f:6e:4f:
                    3d:07:91:d3:59:51:2e:5b:a0:1c:81:35:46:36:1a:
                    55:6c:a1:0c:31:fe:ac:fe:13:88:85:fb:ac:a6:78:
                    59:2e:33:8c:10:b4:0d:62:a4:8d:68:69:ff:cc:0c:
                    40:3b:53:47:79:8e:12:42:ab:e7:cf:6c:de:c9:a9:
                    4c:b1:64:14:fc:d5:de:f4:42:07:3b:02:02:f4:4f:
                    87:17:10:93:2f:5d:97:87:29:4a:f0:65:65:39:70:
                    27:ae:25:0a:d0:79:20:5d:5c:fe:c3:5f:59:71:02:
                    ab:c2:77:ff:22:54:3b:0a:3c:ab:b4:e8:c8:a9:8d:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.21.0/24
                IPv6:
                  2a13:dbc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50766

    Signature Algorithm: sha256WithRSAEncryption
         aa:ca:cb:ff:5e:2a:86:92:25:45:2f:01:b8:e1:80:fb:91:1d:
         14:09:ee:14:30:a1:16:86:a7:97:53:88:b3:0e:ab:7c:1f:be:
         52:a5:0b:57:27:71:b5:b1:05:74:01:78:6f:9b:97:26:21:35:
         5a:8c:1d:71:2f:ca:e6:4d:fd:fa:52:b7:69:90:72:f1:98:9d:
         30:dd:5b:97:a0:42:85:41:51:51:57:7e:ea:90:57:51:ab:ad:
         d0:81:d8:4c:46:d7:df:40:c1:11:5f:90:80:69:8f:f2:c5:6f:
         8b:06:c4:7e:25:78:35:25:67:9f:d4:1c:55:38:02:e0:75:39:
         d4:94:29:0f:17:6d:b3:ca:e8:91:63:66:86:d0:de:7a:d1:7e:
         d3:b5:e7:a6:a5:ca:68:a6:0a:4b:fe:88:c3:5f:00:25:5d:32:
         19:63:8d:01:62:8f:1c:69:75:31:ce:48:40:f4:dd:e3:23:41:
         ff:d7:06:eb:c8:79:29:ec:3a:ca:53:6e:eb:03:55:cc:7a:04:
         bc:21:26:38:6b:4b:c4:2f:ee:23:a8:e9:48:c8:dc:51:0f:32:
         dc:e1:24:71:6b:84:26:35:11:78:4e:29:e3:e2:82:5a:2f:e2:
         de:86:23:35:aa:bb:db:42:21:14:26:ed:03:39:5b:e6:64:cc:
         bf:15:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----