Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
File:                     I15QLDFNUQT3xgzNaXicuEj_Xgc.cer (raw, json)
Hash identifier:          JIj0Q/Ko6BWawZs82dNGHqlqE7LYf9EM/5U8mH0evGo=
Subject key identifier:   23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0196146FFA5999D0760ADF121D204DB5FB54
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 08 Apr 2025 08:06:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210754
                          IP: 94.156.190.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:6f:fa:59:99:d0:76:0a:df:12:1d:20:4d:b5:fb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  8 08:06:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:2e:c6:ec:ac:74:42:95:67:64:fa:92:37:
                    9e:ae:b0:fe:41:15:21:5f:d1:f6:ef:5a:eb:e7:41:
                    e6:a6:10:0a:80:b6:20:83:74:8c:f4:ae:5f:1d:da:
                    ae:ee:a2:0c:92:43:7f:a6:1c:95:46:f8:fb:4b:16:
                    37:4b:f5:c1:ca:0b:8d:3a:1b:0f:db:3e:27:80:78:
                    bf:ef:b2:b4:1e:04:a1:bc:18:7b:3a:07:d1:bf:8b:
                    bc:0a:0d:c7:eb:85:0b:ad:10:f3:a2:f5:c3:30:cf:
                    db:a3:04:07:d1:5e:93:64:17:b8:48:24:9a:d0:05:
                    56:13:30:38:c4:32:21:15:01:3d:a1:0c:02:89:cd:
                    fd:4c:19:b1:2a:31:4a:2b:fb:de:01:f6:1e:69:2e:
                    34:04:a6:ba:cb:b1:82:37:8a:a8:87:34:0b:c6:dc:
                    b6:6f:1d:01:af:d9:d8:1a:f6:9d:75:ed:85:80:5e:
                    10:a8:1c:47:54:e9:f0:f9:8d:09:5e:b1:e9:4f:e2:
                    77:ea:32:d3:ed:8e:26:4d:5e:f2:9f:44:f9:60:70:
                    90:03:74:80:24:b9:b1:20:31:ba:f4:b8:cc:52:ae:
                    65:ab:2a:0a:d6:2e:be:22:62:10:86:25:67:93:36:
                    f2:c3:39:d1:6d:17:39:1b:37:1e:7f:8d:fe:f9:00:
                    86:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.156.190.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210754

    Signature Algorithm: sha256WithRSAEncryption
         0a:80:62:01:d2:2f:4f:42:ba:e1:9c:35:a8:1f:fb:12:9f:34:
         99:1c:a7:78:ca:d4:51:80:0c:46:62:70:d4:dc:bb:da:9e:f6:
         f5:73:fe:99:f4:6b:4e:d5:5f:f6:b3:ba:80:db:c8:80:d3:d0:
         35:e8:58:a2:dc:e5:de:3e:1e:1b:e2:c7:3b:8f:92:14:00:c9:
         d2:51:66:18:3c:1f:b2:16:69:c0:98:c0:a1:20:54:a8:3e:f1:
         6f:2e:b6:7a:74:ff:a4:61:5c:c6:00:bd:2e:64:61:c5:e0:f3:
         2e:fd:cc:35:f0:94:68:06:fc:47:fb:ec:c5:12:ba:0e:39:31:
         2a:9f:f2:04:f4:47:c1:80:d1:e9:44:13:23:eb:c1:8e:6d:83:
         1b:8c:28:c9:d8:62:52:d1:f1:6b:16:c4:3a:4d:9d:a4:b0:a9:
         32:a5:4c:99:88:57:c1:55:b1:71:fe:f0:8b:4a:26:bf:a2:6c:
         6e:f3:2a:59:89:b9:34:29:66:aa:62:00:d9:1c:59:9d:15:5c:
         97:ea:48:e1:2f:5c:fb:f7:5e:0b:47:c4:37:d5:15:2c:b4:b5:
         86:0e:0e:56:86:61:dd:5c:82:31:4e:12:df:15:28:42:5d:77:
         f5:5d:f8:49:69:88:7a:e2:9b:1b:07:c2:dc:f3:31:f2:ea:2e:
         bb:a1:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----