Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
File:                     Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer (raw, json)
Hash identifier:          hO+DnqA1Ep/ZQa23TL5XJRqr8Cv4TGu/8dh2e1OXi50=
Subject key identifier:   1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D70637810826C946ED87451FDDC8D0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213103
                          IP: 2001:678:800::/48
                          IP: 2001:678:fd0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:06:37:81:08:26:c9:46:ed:87:45:1f:dd:c8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:f9:43:19:cf:30:8a:05:d0:dc:ae:62:25:
                    45:39:c5:04:e8:3a:82:54:a2:8c:d1:a4:a8:99:7f:
                    cf:dc:88:87:b1:5f:e8:6d:6b:0e:05:26:fe:76:3f:
                    85:39:84:2a:c3:00:1d:c2:19:36:03:6a:e2:4c:f8:
                    fc:87:40:e4:11:6d:e1:35:44:90:b5:46:1d:dc:b3:
                    45:12:47:44:67:98:24:4f:21:b6:fd:98:89:b9:c7:
                    f0:f6:bd:c0:31:88:04:03:a7:f2:09:bf:9d:32:e7:
                    14:6e:3a:d9:89:76:5f:f2:e0:7f:f2:92:d5:7d:06:
                    4c:50:67:93:26:b3:fe:eb:cb:06:6c:68:70:6c:dc:
                    6e:f0:d1:fa:25:7e:f7:61:c9:07:54:ee:50:df:a3:
                    fc:e6:55:6e:54:e8:be:3d:7c:d9:cd:e3:9f:f0:1c:
                    cf:27:0d:68:ef:7e:b0:b2:8c:75:3e:85:41:a2:85:
                    db:51:a2:40:77:dd:c0:6e:50:57:ba:2a:dc:ac:b8:
                    3b:e2:64:7d:5b:e5:4d:7a:fb:07:2a:c5:2c:b6:01:
                    2b:90:a5:ea:ba:6e:17:3e:c0:58:c2:99:40:ae:af:
                    34:12:66:19:53:cd:f6:2c:80:fe:65:76:65:fe:8f:
                    b3:8a:fe:09:45:1b:23:df:72:6f:87:8e:d6:19:89:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:800::/48
                  2001:678:fd0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213103

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:ee:e2:20:50:be:ca:b0:f6:2a:16:38:2c:f7:c9:09:27:
         63:6f:5a:40:79:36:82:4f:6f:0f:76:bc:f2:8e:44:ce:1b:9e:
         3b:2d:55:46:4e:dd:ce:2d:77:cd:85:db:20:f2:e9:9b:8e:88:
         88:ef:19:24:e3:b0:65:4d:49:7c:8e:54:91:9d:47:1a:e1:a2:
         11:d0:ff:32:57:e9:36:05:53:cc:d8:32:94:e5:f4:1a:ac:e9:
         f6:05:fa:29:02:20:8f:84:f4:ec:8e:55:be:b4:83:51:96:e5:
         d2:dc:56:1c:1e:8d:7d:cf:8b:a0:2f:7a:aa:84:b7:23:13:75:
         fd:08:eb:f0:31:59:0a:5a:59:5a:28:f0:f4:e4:45:e0:97:b2:
         90:b3:16:b8:98:39:e5:ff:d4:1c:7e:4a:66:75:29:d9:8f:dd:
         9b:5c:75:54:4a:25:75:5a:e3:d5:08:6b:51:96:47:1e:9d:16:
         ff:c9:2e:a9:c2:03:dd:f4:08:12:16:69:64:31:21:77:4d:fd:
         ec:57:26:c6:79:56:81:26:ab:ca:9f:fd:ed:c0:df:52:a8:6c:
         9e:ef:04:89:f7:1d:25:c4:3d:ef:7e:8e:0e:a0:73:d7:07:65:
         2a:a9:5b:b8:1e:63:5a:91:af:6b:49:f4:4e:be:2b:16:6a:13:
         d0:b3:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----