Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
File:                     Fi14JJtyG00s6M9t_PvEQiITrJ0.cer (raw, json)
Hash identifier:          3578LLfVNWT4ZFlhNdXExi6RGTQUShzVEQjzKMnfgQA=
Subject key identifier:   16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942522252EAFACA5CDD5CEDF26CB7A2D57
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203944
                          IP: 185.118.216.0/22
                          IP: 2a06:95c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:25:2e:af:ac:a5:cd:d5:ce:df:26:cb:7a:2d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:60:2c:50:0e:4b:c3:e2:97:be:d5:19:0c:
                    6a:94:09:ee:08:d7:6a:57:1b:8d:5e:ad:a2:79:a3:
                    77:c4:ee:22:0d:27:7c:77:91:0b:bd:63:e3:d9:e2:
                    4a:33:48:9c:be:85:8b:4e:41:e6:1b:ed:2e:12:c1:
                    c1:71:b8:5f:1f:aa:a1:3a:b4:e7:67:c1:3d:b5:66:
                    38:e3:38:a3:8f:ce:6a:06:85:95:70:2a:70:1c:df:
                    31:70:53:41:dd:d3:61:fe:d8:71:28:39:26:f1:8c:
                    16:ec:d2:3c:19:51:3c:4b:33:5a:26:20:c2:54:d3:
                    bf:a7:f5:52:6f:54:b4:b9:c7:44:3f:e7:13:c9:47:
                    60:05:ac:2a:90:3c:ba:a1:87:1a:f0:92:87:0b:14:
                    11:9e:1c:ec:ae:47:64:fa:b4:20:7f:12:1c:2c:43:
                    3e:e4:4e:fe:58:cf:b8:46:a5:87:9e:9b:32:92:d9:
                    a4:2c:15:87:7b:8c:a0:f8:f6:e8:37:82:d5:8a:20:
                    38:ad:ac:3d:49:09:6f:6c:8d:29:d2:db:a2:d6:52:
                    5d:40:a7:6f:b7:47:5e:aa:a2:e8:9f:45:dd:14:7d:
                    80:e6:58:0a:1f:6d:57:27:f1:2c:f3:02:1f:d1:05:
                    3f:4e:e7:22:5f:5e:6f:da:f6:94:2a:87:56:34:a3:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.118.216.0/22
                IPv6:
                  2a06:95c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203944

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:d8:b6:97:4b:7d:e0:f6:f8:cd:ee:f3:99:2e:57:d9:28:
         00:96:1a:e9:00:29:86:63:49:ef:83:0d:26:7b:e6:02:a5:9f:
         22:e2:3a:55:ed:16:d8:5b:e9:b1:99:91:7f:1d:5a:f7:b1:bc:
         cf:f5:3e:ce:29:57:ec:f9:12:0d:8e:cf:73:df:08:5c:be:d4:
         25:0c:5c:df:11:5b:ce:ec:38:1d:e0:e3:e9:8c:c2:94:76:d0:
         3e:52:ac:99:0e:c6:bf:8b:46:c6:8a:c7:25:2b:a9:26:05:a4:
         e2:39:1b:4a:b5:c2:3b:e1:e9:82:5d:3f:db:e8:b4:21:7b:74:
         f6:b1:bd:95:fb:c6:a6:d8:e7:b6:ca:3b:d2:d3:44:aa:f3:0e:
         0b:96:82:fc:b5:e9:5b:d5:13:38:ee:01:3c:b5:3e:6e:52:ab:
         f6:5d:d3:21:d5:8a:42:b1:8a:05:fc:3e:5b:2a:6a:41:e3:6f:
         d8:c1:bd:6d:02:15:e3:23:e5:93:ff:15:64:67:42:a3:9b:d9:
         cd:74:c0:13:99:4e:80:7c:e5:a9:b8:ed:1f:46:e8:3d:72:f2:
         1c:5e:d9:20:57:87:67:27:99:30:48:2c:92:75:c9:89:a8:df:
         3b:93:18:37:a5:dc:f2:c0:53:60:04:c0:6c:a8:13:eb:58:bf:
         ba:08:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----