Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
File:                     KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer (raw, json)
Hash identifier:          hhpeUC9rqZLC8nbNX77UKXaLTvM/TFIzY34ke2M/vUg=
Subject key identifier:   29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6D09AA9B433EE1DA878ED539D72B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62396
                          IP: 2001:67c:2c68::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:d0:9a:a9:b4:33:ee:1d:a8:78:ed:53:9d:72:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=29d59e889f99aefdde5e949fe8079d337b57f447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:12:0f:ce:c3:2a:cf:e1:bd:03:97:ce:c6:
                    2a:bd:34:69:f4:01:d6:30:20:de:b1:80:e4:91:88:
                    05:16:b6:47:7c:62:c4:f3:76:b9:9f:52:f7:5f:43:
                    ec:c7:39:28:d1:7a:80:2c:46:a0:85:ff:e7:0e:7f:
                    be:8d:4e:8e:cf:d1:30:95:77:5d:54:5d:0d:65:24:
                    70:8f:c4:31:2f:09:f2:ff:c6:a0:23:50:4e:e9:45:
                    69:a2:be:75:86:9d:dd:25:7d:0d:05:dc:c6:45:2f:
                    17:43:f2:b9:1c:ad:67:b1:89:4b:c9:8e:3b:77:ae:
                    7e:50:2e:4b:06:40:78:40:4b:9b:31:7a:b3:2f:81:
                    0d:e5:df:69:6e:31:d7:f7:a2:f3:6a:4d:05:0d:8b:
                    93:b0:77:95:7a:b0:ed:71:cc:1f:d9:5b:03:f8:2c:
                    7e:09:07:9a:94:94:b6:ee:13:39:3f:11:14:7c:ba:
                    1a:4e:15:7b:73:b8:01:61:98:e3:eb:38:66:cc:67:
                    6a:cc:f4:c3:49:a4:de:b2:f2:8c:d9:d3:da:14:d7:
                    0d:2e:99:0b:eb:a0:9a:fa:f5:45:2a:d4:af:e6:85:
                    4f:cf:af:b6:90:7d:a5:96:73:c5:2d:2d:3a:20:d8:
                    7b:b8:d3:d3:0d:75:d2:b9:64:8d:d6:39:bf:ed:e3:
                    d7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2c68::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62396

    Signature Algorithm: sha256WithRSAEncryption
         23:9b:0c:35:ec:3b:9b:a1:21:8c:07:7f:da:fb:27:84:c3:69:
         a3:58:f9:26:0b:e9:cd:55:5e:56:a3:a1:42:b0:bf:1c:be:f9:
         16:96:54:10:af:a3:e1:4d:21:0e:56:c2:35:d9:85:ac:95:19:
         ab:0b:c3:f0:19:50:81:8f:19:33:26:7c:2c:3d:6e:6f:8f:76:
         80:14:d1:80:2b:96:a4:bc:fd:7e:28:06:dc:e0:44:d7:73:12:
         08:f7:57:c6:06:f1:f6:0f:65:24:bf:9b:62:fa:72:a6:11:7b:
         a5:f3:fb:a0:11:a9:f9:39:f8:59:54:7c:5a:f5:9b:be:a8:30:
         ea:9c:ba:4d:ad:3e:f3:9a:27:e4:15:e6:4d:b2:d0:f5:bb:7f:
         9a:dc:37:13:86:1b:d3:9d:94:f6:b0:42:1f:c1:94:08:f7:21:
         a8:4e:c8:f3:fe:f7:ec:11:4f:bb:87:53:cc:7b:e0:a7:d8:19:
         dd:d9:33:2a:31:7d:02:e3:0e:a5:52:06:98:1a:f4:eb:b4:6e:
         04:33:f0:37:a3:cd:26:6d:c1:fb:3b:5b:3c:35:40:18:e8:ac:
         d8:e4:fb:55:e6:43:fa:59:f2:6f:10:58:1b:e3:78:69:2a:32:
         f8:6a:30:b9:4b:92:16:01:b1:00:58:49:c7:5a:fa:9a:c2:99:
         70:f8:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----