Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
File:                     FivG9rrBQqA6uxp62RaQaD8DpNw.cer (raw, json)
Hash identifier:          9mh8jDtZ/xObu+HDjCzYQlEX8gZ3MjUgvKTpohGni80=
Subject key identifier:   16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C2CBDFF35C9E9C88EBF09C01278AD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60245
                          IP: 185.54.236.0/22
                          IP: 2a02:4760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:2c:bd:ff:35:c9:e9:c8:8e:bf:09:c0:12:78:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:49:ed:1d:8e:4f:39:34:7e:58:93:5e:ce:
                    9b:2a:e5:a1:60:9e:8f:8f:28:58:cc:2c:09:b5:9a:
                    fa:d4:11:af:dd:ac:27:5f:ff:26:d7:0b:a5:61:2b:
                    38:ca:9a:88:34:e5:7b:51:d8:32:ab:95:d3:de:30:
                    a8:5d:8b:d4:b1:34:56:f0:c0:4a:09:af:fa:fe:0c:
                    94:18:61:2b:a3:b7:f5:98:00:c8:a8:34:e5:d9:65:
                    65:41:2b:c5:67:67:11:7c:6c:4e:7b:f4:15:6a:12:
                    5b:8a:89:db:c8:75:21:00:56:39:ae:26:b1:28:09:
                    02:77:18:1c:63:17:72:66:f8:e8:3c:34:ba:a9:23:
                    73:2d:f3:b4:58:77:e4:f6:fb:c4:a2:86:d5:a6:8b:
                    ce:61:92:bf:b0:d3:76:6d:41:f3:9f:05:11:61:7e:
                    a2:4b:e1:d2:10:9a:2e:3c:3f:c3:5b:53:b3:e9:6e:
                    a2:d4:0e:2d:79:ec:0b:51:ee:9b:15:4a:12:5b:31:
                    fd:c6:ef:8c:76:ab:24:ff:c7:10:16:7a:d8:89:e6:
                    b4:c5:9e:e4:c7:03:38:8c:0c:b0:28:ab:79:1c:b7:
                    e9:60:e1:69:c0:5b:c6:a8:76:c3:ef:75:b6:50:2c:
                    24:73:1f:e3:37:20:0e:dc:c8:13:b7:0e:85:70:a7:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.236.0/22
                IPv6:
                  2a02:4760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60245

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:31:f2:72:49:aa:b1:d4:92:e1:51:c4:eb:6f:0b:c3:49:
         15:5d:37:b0:aa:46:da:d4:00:4e:29:4d:c5:73:46:4e:a4:a8:
         22:c8:50:c4:2a:84:b0:ec:91:a6:7c:1a:5d:c7:0c:82:cd:18:
         05:d8:48:68:98:da:ef:c3:72:9d:95:f7:80:46:21:10:5a:c6:
         9f:8e:0b:3d:c1:e6:5d:e3:25:14:63:d2:a1:34:38:3a:64:ab:
         c2:e7:58:83:69:6b:62:48:e2:de:67:91:6f:8b:ae:56:be:1d:
         5f:17:06:9f:33:b7:01:05:89:89:c4:42:82:39:63:31:65:57:
         68:a7:05:04:f1:c6:bd:57:7d:1c:3d:43:1b:b5:4d:07:96:f9:
         e4:9f:3b:da:60:d7:6e:d3:5b:8d:0f:cd:aa:05:fc:9e:02:b3:
         ec:48:80:24:40:c0:ca:28:f4:d4:31:67:0f:c3:b9:b9:2d:f4:
         51:65:5d:09:d4:93:b4:a4:33:40:79:30:94:13:07:0a:a8:83:
         62:6c:8a:8d:e9:16:4d:82:8e:76:46:db:58:ca:94:e6:3a:cc:
         40:1a:c9:47:0a:57:2e:39:35:5e:13:8d:7f:e8:c8:64:36:00:
         2b:2a:69:e5:2d:ea:a9:6a:db:c4:c6:65:18:7c:a1:38:4b:49:
         3b:02:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----