Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
File:                     GbvChJjrFpWQsGmgBUFMQaF5skA.cer (raw, json)
Hash identifier:          MqC1GNY935maExm1I2vi4fF1kdjdwcVU9rTyI8NBsAw=
Subject key identifier:   19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143A20FC552F8CD2410A045E52EFD6C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44292
                          IP: 92.42.168.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:a2:0f:c5:52:f8:cd:24:10:a0:45:e5:2e:fd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=19bbc28498eb169590b069a005414c41a179b240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:b2:fe:eb:a8:52:7d:cf:23:f0:f1:2e:4a:
                    a5:84:84:da:33:39:2d:74:5c:b6:be:89:6f:9f:5f:
                    7b:b4:c8:8e:d6:06:75:e9:1e:13:9d:42:8b:7f:df:
                    97:d3:d6:c9:70:d6:fe:04:d1:17:b1:5c:d7:f4:df:
                    13:53:0b:53:de:66:81:0b:7e:33:6b:ed:5e:9f:96:
                    97:ac:8b:f4:8d:71:1f:ed:78:f2:65:d1:4a:94:e8:
                    a0:db:d0:95:d9:7d:a1:d7:3c:f2:d3:ee:62:f5:1f:
                    54:f4:08:6b:0b:b9:6a:fa:c3:e2:79:20:23:84:57:
                    59:ae:ab:44:8e:4c:5e:e9:cf:8a:5f:00:66:dd:ae:
                    97:80:1c:51:20:38:5b:cd:f1:fd:ae:f5:63:47:ec:
                    c5:b2:a0:07:da:5f:ef:b7:b4:93:57:7c:c1:57:a2:
                    e8:a3:a3:04:35:4f:50:b3:e2:f7:e1:a3:2f:93:3c:
                    c9:30:b8:b9:8d:87:ca:9a:88:50:a5:38:d3:d9:6b:
                    1d:e4:b6:4f:54:f9:a9:9a:69:9f:ba:f6:a6:4d:a2:
                    d7:c6:8b:f9:fc:41:16:03:e0:37:ef:d0:68:50:5c:
                    c1:21:98:ff:e3:ad:13:91:c3:69:f0:86:d2:fb:94:
                    cc:57:a5:a3:40:72:7d:ad:cd:3b:c5:b7:7e:e1:b7:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.168.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44292

    Signature Algorithm: sha256WithRSAEncryption
         60:00:4b:cc:b9:9b:fd:e4:d1:c5:c1:89:03:96:f7:61:ea:46:
         48:a0:37:34:22:d8:66:e7:df:5a:44:a4:4b:98:47:0e:a4:cb:
         65:2f:5a:a4:1a:0b:35:2b:aa:c3:2e:39:b3:f4:f2:e5:ff:39:
         47:be:74:e8:10:0a:22:65:b3:77:f9:3b:30:e8:82:46:f1:a1:
         14:79:9c:41:5b:e7:7d:db:8e:c7:a6:3b:c6:88:f4:0e:c3:67:
         c2:9c:9a:eb:c6:d0:9c:1a:b1:91:3e:83:ca:f8:8b:7f:61:8c:
         47:63:77:34:c2:6a:42:37:cb:ef:f3:2c:7d:0d:9b:ed:13:bc:
         c2:8b:ce:b0:16:ab:bf:82:7a:c7:84:a1:d2:09:8c:8d:d5:90:
         da:c9:73:15:90:ff:fa:0d:09:22:11:68:21:13:35:c7:3e:97:
         20:ea:67:fe:dd:c3:31:24:90:88:58:d0:de:45:85:1b:18:bc:
         4e:6f:6f:65:48:4f:3f:99:44:70:c2:4a:af:74:f6:20:4a:a6:
         a4:e8:a1:70:e6:ba:a0:60:a4:ba:b6:de:25:b5:90:40:28:06:
         80:11:01:62:52:6b:87:ac:4c:cc:81:d9:9e:b5:0e:6b:f5:df:
         91:61:ac:8e:c2:ba:74:ae:14:69:e9:27:c6:d1:2b:df:9c:0a:
         b4:1b:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----