Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
File:                     J0PbfuNKwtTtV49JXgCWy5iv9xw.cer (raw, json)
Hash identifier:          R3JKHeQSlJCBePUjEWm9+s7J7f1kuuksMBuZTelIH3Y=
Subject key identifier:   27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195CCADC278B7F75F66F51AFBD4A6F95832
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 25 Mar 2025 09:41:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62025
                          IP: 2001:678:103c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:cc:ad:c2:78:b7:f7:5f:66:f5:1a:fb:d4:a6:f9:58:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 25 09:41:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:18:c4:c7:a0:24:fb:aa:f7:ab:60:02:c4:
                    3c:da:43:79:03:54:ea:86:11:d1:14:2b:e9:c4:ab:
                    a6:db:79:8f:d7:cb:87:ce:55:64:5e:5f:ba:80:43:
                    8c:75:56:8a:15:6f:fe:51:64:2b:33:c2:9d:c8:2e:
                    4a:56:ff:5f:2f:b9:6a:9d:4c:cf:7c:9d:8b:83:f0:
                    85:2b:1b:96:21:4f:cf:1a:4e:11:6f:a3:a6:16:32:
                    eb:93:3b:cb:d0:1b:90:bf:18:07:de:b8:78:5b:93:
                    8d:c1:03:7c:8b:13:51:98:30:1a:74:3d:f3:17:34:
                    99:31:be:20:a0:24:d5:6b:4a:ff:20:7d:86:8e:07:
                    13:5a:7b:bf:1b:fc:97:f1:e8:c1:4f:cc:c8:28:a0:
                    03:cb:7a:c7:c9:10:4e:73:dc:37:fe:22:5c:1e:1b:
                    4d:0e:77:5a:c5:1f:48:38:45:f6:5f:8f:6d:04:cb:
                    7d:79:23:b6:09:40:48:f6:13:8c:92:7b:2e:06:84:
                    da:2a:0a:cc:da:06:fe:70:0f:8e:d0:63:02:d9:91:
                    13:25:0f:ce:89:3a:fc:0b:2a:eb:2f:5e:a8:62:1f:
                    95:fa:f2:56:48:06:7d:07:68:b1:ac:c4:09:93:a6:
                    14:a7:03:0e:58:db:cb:79:31:59:a7:d3:0b:f5:90:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:103c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62025

    Signature Algorithm: sha256WithRSAEncryption
         79:cc:86:f8:58:7e:b6:de:1e:97:27:1c:4a:a1:f2:b0:48:a6:
         a0:5b:11:49:a2:9c:22:ae:f4:43:42:f5:ab:a8:2e:e9:48:38:
         ca:e1:df:21:60:b1:e4:34:2e:75:e7:3c:2b:08:06:e1:bf:55:
         04:82:50:93:d9:4d:72:26:84:df:b8:11:18:9c:dc:f7:29:ec:
         9d:e4:ec:57:b8:26:15:14:6e:2b:08:10:9c:0f:db:b2:4d:f6:
         f4:c8:09:d1:7e:3f:66:ae:1a:b3:b6:88:98:7d:09:7a:d5:b1:
         81:0a:b8:94:15:e9:fe:04:38:c2:29:50:3c:57:f5:94:fc:50:
         b0:2b:a9:25:8b:b7:3b:e1:a9:70:20:15:5f:45:91:39:65:83:
         55:15:ea:78:4a:98:64:5a:bc:b0:19:3a:d8:9a:cb:79:94:6e:
         78:1e:a8:43:9d:45:9d:65:2a:05:20:99:83:64:4f:05:60:b6:
         1a:50:8a:39:ce:e0:55:3f:36:8f:13:2d:0f:b6:4e:1d:e1:e5:
         33:3a:62:02:dd:b4:5a:9c:47:e7:83:06:f6:49:5a:e2:f4:a9:
         7e:10:70:c5:bc:f2:02:63:93:7a:de:a7:bf:8b:69:71:2c:de:
         19:35:a9:a4:ad:8f:07:f1:4e:6e:47:b6:d5:a8:a2:54:53:b2:
         ad:4f:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----