Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
File:                     Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer (raw, json)
Hash identifier:          pKEOHRWzMCKStjhg+wQsvWzfrYKbKTTWDH/DgJ3FUVE=
Subject key identifier:   2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F6ADB6BA45955A9CE64EDE88E6C30
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197569
                          IP: 2001:67c:2f8c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:6a:db:6b:a4:59:55:a9:ce:64:ed:e8:8e:6c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:c6:b3:49:93:a0:df:4d:32:61:a1:a0:41:
                    3c:3c:36:fe:36:b2:56:8c:df:6a:11:cc:96:de:21:
                    eb:0d:fa:3a:ed:b0:90:9e:0a:fe:9e:47:d7:58:25:
                    8e:f9:91:de:fd:51:1d:08:7f:b8:fa:45:c4:87:6f:
                    86:e2:97:a4:33:c6:8f:a0:4a:b0:b6:87:61:2c:d0:
                    db:80:be:4c:8f:e6:7e:1b:d3:b1:8a:d0:08:48:cc:
                    1d:bb:dd:b9:79:c0:b1:6a:9c:01:9f:d1:fa:75:fd:
                    cf:37:4a:fb:eb:2e:f4:b2:57:a8:6a:1c:07:46:2f:
                    80:ee:b7:2c:c7:9a:4a:61:1e:8d:c0:df:ee:a5:1f:
                    d8:bd:7a:d2:ec:a9:5b:6c:48:b3:59:ec:cf:94:1b:
                    a6:a1:50:1a:e0:e3:9d:eb:d5:52:91:a6:94:8f:62:
                    5e:77:82:6c:cc:51:e3:ae:cb:0c:98:71:a1:f7:25:
                    ec:0b:bb:2a:8e:fb:bb:7a:50:f5:fe:a4:05:a3:91:
                    81:e9:e6:a1:10:f6:f6:d4:92:8e:97:be:7a:61:12:
                    31:67:e1:42:c4:fd:1f:ff:69:6a:17:94:5a:44:da:
                    20:c2:d5:85:69:08:da:4b:94:6c:b6:80:ef:7e:3f:
                    b5:aa:20:30:b8:d7:e9:46:77:a1:6b:15:26:8a:38:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2f8c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197569

    Signature Algorithm: sha256WithRSAEncryption
         83:d7:16:22:09:ad:37:fc:2f:75:a9:aa:2e:9e:ec:54:7b:07:
         9f:70:9a:9b:d1:ab:91:90:fd:0b:82:55:3e:54:7d:8a:52:ea:
         29:d1:8d:47:ff:d9:3a:a6:c5:ba:03:f7:c4:c6:31:8d:21:c0:
         cb:5b:16:36:ef:ca:47:2a:3a:ac:e0:83:9a:e3:bf:9b:85:23:
         76:9d:81:a7:14:09:21:1c:49:68:bf:32:69:65:9f:f6:ee:4a:
         b5:25:8c:13:7f:69:42:37:22:7a:44:6c:78:84:d7:aa:c4:f3:
         8f:b6:be:7c:6f:3f:6f:2b:ed:e1:2f:38:b8:e0:33:b5:d2:df:
         38:5e:fe:fa:e1:b9:95:9a:8e:82:1e:1c:eb:e7:1a:5b:7b:64:
         b4:45:77:5d:d3:49:8f:e4:5c:67:a4:bb:64:9b:38:cd:e6:86:
         9f:4f:18:b2:42:63:cb:65:4c:8b:7a:5b:05:ce:da:b8:bd:40:
         18:f0:17:7c:85:be:b2:34:df:ea:b8:32:ed:f7:2c:8f:6b:7e:
         49:87:54:2c:9f:d6:d1:45:0a:c5:a4:6d:bc:c4:05:10:b4:58:
         55:67:18:67:6b:73:8f:7d:81:43:6a:7a:af:7f:36:57:71:5b:
         33:bb:c9:1c:4c:2a:9b:c8:90:22:36:37:2c:30:9e:e2:f1:49:
         21:c2:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----