Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
File:                     H7XBu67UTItq4_K1ZtAcwljfws4.cer (raw, json)
Hash identifier:          eCnJEnN7NlaYdl4S1NQ7oMUyR8La/5V4lQbbdzdfqf0=
Subject key identifier:   1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942827DBB9E1B3BBBF40D9AFC4F1B083F7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:54:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211638
                          IP: 2001:678:f0c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:27:db:b9:e1:b3:bb:bf:40:d9:af:c4:f1:b0:83:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:54:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:d3:7d:bd:d9:40:a4:f2:df:68:d6:df:7f:
                    0d:c5:5a:3e:bb:e7:79:1b:45:85:f1:4e:67:d5:c5:
                    3c:46:2b:65:70:b5:bd:52:11:6f:8f:55:d5:37:3d:
                    60:cd:48:b3:53:c9:c7:38:a5:6a:1a:61:6a:a8:45:
                    2a:ae:40:f8:bb:06:54:57:98:98:4c:b4:92:8b:44:
                    c8:42:4d:29:34:60:b5:ca:d9:3d:9a:eb:1d:69:66:
                    bd:3d:df:27:4d:42:e8:3a:27:84:84:85:b8:90:a7:
                    e0:c3:42:b3:bf:07:b1:84:96:f6:95:32:63:83:86:
                    7e:48:38:fa:ba:83:59:82:54:e8:67:10:41:f2:15:
                    3e:ca:63:80:6e:44:88:06:eb:07:1c:2c:e9:a7:f9:
                    c1:7e:f2:89:4b:70:5d:6b:92:bf:2c:9d:fb:54:78:
                    c2:67:80:37:50:2e:5d:16:6e:42:60:ad:11:9c:1a:
                    94:c3:93:31:23:cd:71:f7:cc:a7:bd:d0:95:9b:38:
                    0f:0d:a8:42:4e:0f:e1:d4:1d:6e:90:11:f8:6a:16:
                    27:94:c8:ce:25:ca:f8:55:1f:ad:e6:5b:aa:e7:c3:
                    99:de:69:49:78:7f:35:2e:ba:49:d4:32:8e:e1:8d:
                    f0:06:a2:6d:c1:e6:b7:6a:2a:64:ec:bd:cb:a8:e5:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:f0c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211638

    Signature Algorithm: sha256WithRSAEncryption
         85:60:bb:5b:15:a8:c5:d7:4f:7a:19:b6:67:f7:c8:e1:1f:34:
         8b:35:06:7b:00:8c:71:7e:87:06:a7:fd:19:9c:38:11:59:50:
         58:6b:c5:c5:1d:cb:9e:fd:d9:0d:57:4d:b8:0e:61:b2:ab:18:
         54:09:82:c7:ba:b7:64:dd:78:f5:c7:33:5e:8a:11:3c:f1:6f:
         a0:85:57:c8:78:1c:44:7b:2e:91:1b:6b:9c:f4:e1:c1:76:76:
         4b:2b:2c:6c:d3:58:67:0b:5c:1d:18:14:e7:c6:a4:59:f8:47:
         b4:f8:63:7d:0f:4e:b4:bf:7a:3a:cb:13:ff:8c:7d:5f:37:66:
         ab:2a:d9:b8:f4:09:4c:88:12:f0:0d:af:2e:38:f7:c8:96:37:
         28:64:29:39:fd:c1:76:47:27:3b:da:2a:2a:cc:55:03:98:94:
         c5:3e:e2:be:8a:2a:cd:b3:98:2b:93:d4:eb:39:e8:b5:8b:96:
         06:28:39:a7:80:90:2d:a9:9d:ca:cc:3e:94:ed:18:e3:5f:98:
         72:c3:8a:fb:b9:c0:e3:69:e5:b0:05:8d:4f:2c:cc:9b:30:b7:
         95:06:e1:d9:5a:5c:a3:92:14:02:25:b2:ed:e1:86:14:ba:3e:
         c2:6b:aa:28:d2:05:70:12:ad:85:69:ba:c3:95:91:a1:3c:f4:
         d6:74:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----