Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
File:                     KkVY4mVr-JczOJWU3xRNIdHcAxM.cer (raw, json)
Hash identifier:          37VF1ix88ztcMeMg3g1RFdXJyayF+ErHVJCBLtF8VyQ=
Subject key identifier:   2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421443B2E23714217B233B055B24F3637
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215582
                          IP: 2001:67c:dc0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:3b:2e:23:71:42:17:b2:33:b0:55:b2:4f:36:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2a4558e2656bf89733389594df144d21d1dc0313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:8e:ba:68:fa:b6:ed:9b:47:ac:1b:21:ba:
                    b7:3a:b0:1b:48:80:7b:da:55:ac:7e:8b:f3:30:62:
                    d5:39:2f:c0:35:68:6b:ff:1e:cb:90:90:df:ff:8f:
                    40:22:7b:97:e0:cd:9d:1c:9a:fe:9a:44:4c:7e:28:
                    b6:49:65:02:9c:96:6b:b7:85:e7:b4:49:8d:ea:2e:
                    c6:60:86:d2:b3:50:9a:cf:49:53:8d:7d:1a:d7:cf:
                    fb:83:95:bf:a7:b3:16:6f:9d:90:37:c5:0d:f1:a8:
                    a6:ec:50:5c:8a:1c:89:76:44:38:b0:1e:e9:cf:f1:
                    2e:31:af:70:ac:8e:ce:27:d2:7c:e4:42:c8:02:75:
                    7d:21:7b:44:64:dd:5a:12:d6:b7:24:f2:7c:e4:33:
                    fd:96:ff:ca:2f:7a:7e:69:ae:72:22:84:05:2c:e5:
                    b4:76:f3:d5:59:09:f7:d5:b1:2f:e2:4f:68:ac:62:
                    77:00:c1:9e:a5:01:96:b1:60:22:ba:1b:47:ea:0f:
                    bc:dd:3a:ff:5c:30:82:ba:c2:8b:a8:93:77:98:d4:
                    34:9e:76:45:29:7a:01:3d:db:ae:94:07:8d:ef:11:
                    cf:16:20:f0:ea:d8:63:88:da:91:2d:e9:1c:94:64:
                    bb:ec:9a:b0:1b:20:8e:ea:b2:0f:d7:8f:0a:99:27:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:dc0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215582

    Signature Algorithm: sha256WithRSAEncryption
         86:45:ba:10:af:05:b9:1e:17:14:f7:a0:8c:70:3e:59:01:aa:
         d1:8e:07:87:f4:bd:25:98:10:a8:9c:c1:d9:09:29:b9:0a:b7:
         df:91:b0:52:ed:45:c0:fa:97:1c:08:23:87:93:2a:60:19:40:
         7d:44:d7:de:24:63:1f:ec:73:bf:c8:12:33:17:c6:fd:5b:ee:
         bc:aa:41:62:f8:c9:3a:89:73:ad:ca:15:d6:d3:2f:29:e7:f3:
         95:88:02:b8:f1:0e:38:80:0e:db:4a:d1:58:f1:a4:55:89:31:
         4f:4d:a5:1c:b2:4e:e9:bd:2a:68:d4:21:ae:4e:e5:ff:91:f9:
         2d:a8:62:d3:5b:86:7a:33:10:64:3c:7b:a9:84:ca:6e:e0:ea:
         9b:97:5f:cd:2e:b6:64:0f:5f:10:12:66:3a:07:24:e1:19:21:
         06:a9:df:cf:58:0e:68:f5:36:89:ad:72:e1:f0:7c:17:25:72:
         eb:42:82:26:29:7f:ef:ef:ad:12:7b:85:6c:fe:32:a6:12:08:
         82:04:c7:d1:07:ae:44:df:fb:3a:0f:fd:48:5b:de:ad:80:a4:
         85:20:d9:b5:b5:d3:4d:0d:ac:99:ff:03:c5:73:9d:d6:0d:6f:
         dc:53:b7:6c:cb:14:50:2c:6e:98:ec:04:ca:e6:65:13:86:c5:
         dd:8a:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----