Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
File:                     Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer (raw, json)
Hash identifier:          FT3gXq52GQOOg5C8bzL0uX7Wj3ahSaz4TQgfMRrSfqE=
Subject key identifier:   2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B380A51F4505E2269AB37BD1570CE3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211514
                          IP: 2001:678:f24::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:80:a5:1f:45:05:e2:26:9a:b3:7b:d1:57:0c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:55:99:56:d1:8f:bf:49:63:36:9b:2b:73:
                    db:6b:e4:66:ca:6f:1b:48:90:2c:e4:0b:a7:c0:36:
                    1b:59:df:ac:1c:fc:3b:6f:98:ee:1d:26:a5:6a:ba:
                    5d:38:c9:02:76:86:bf:4b:76:48:92:f8:e6:16:da:
                    fc:00:54:35:dc:eb:5f:e4:9c:83:c1:20:0a:19:ca:
                    5d:ee:09:74:97:46:cb:a2:4e:c2:da:55:17:50:b0:
                    46:a0:ab:42:93:97:e3:0f:f9:cb:5e:05:ec:20:ea:
                    18:6f:3f:a9:7a:06:67:09:e0:e9:7d:aa:f4:b2:ee:
                    c1:4a:5b:1a:6c:39:3b:94:d1:76:db:29:9d:6d:ed:
                    6c:1b:1b:66:82:d9:50:03:71:ae:0a:42:8e:bd:27:
                    62:fe:fb:ca:24:ed:f3:9a:53:88:28:68:6d:9a:6a:
                    38:48:31:6f:5c:97:7c:63:c6:c3:20:c8:f9:3c:8f:
                    15:e0:02:51:e3:06:7c:01:2c:9d:af:b1:f2:84:b8:
                    2c:96:74:5c:63:9e:10:3c:c4:85:3f:71:d7:dd:9b:
                    9e:bc:6d:0e:f2:22:70:47:2f:a7:68:70:24:4c:08:
                    ae:2b:0c:c3:37:61:cb:45:6f:4b:77:93:73:e5:dd:
                    8e:c8:a5:77:e4:ed:aa:3d:b7:ae:97:3a:74:5c:a1:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:f24::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211514

    Signature Algorithm: sha256WithRSAEncryption
         4e:14:d4:17:5e:37:00:b7:b7:24:08:4a:35:64:31:d3:c2:66:
         e8:89:7a:32:e3:1c:13:f1:61:1d:65:e7:53:28:27:fe:47:27:
         f8:e0:eb:71:5d:91:eb:1e:e3:de:41:97:3f:24:be:f9:f8:97:
         7f:f8:e1:ba:36:f2:86:f7:5e:93:a3:97:96:5c:bf:da:da:d4:
         65:e0:dd:db:ca:0d:b1:a6:76:ba:78:26:86:ed:c2:64:ed:1b:
         f8:ce:4b:5a:be:53:87:57:d6:e2:5c:c2:79:5f:eb:dc:2d:9e:
         7a:f2:9f:06:04:aa:55:04:a1:f2:67:74:a9:d1:51:a7:56:d8:
         bf:21:86:5f:0f:47:ac:df:d7:86:93:7b:ee:a3:b6:be:9b:14:
         99:c5:cd:ca:55:f6:96:7f:2a:63:31:92:10:cc:6c:1f:42:0c:
         a0:41:9a:25:1c:fc:9d:a7:7c:2e:4a:01:ff:31:d0:d8:9b:ee:
         56:b0:61:e4:a8:8b:1e:af:22:b1:8e:5e:fb:92:a2:81:74:2c:
         bd:8b:4c:1c:2d:ef:2d:9a:d0:db:3c:6f:ff:f4:50:a9:ed:11:
         74:6e:c2:9e:9c:a6:04:b2:33:5f:40:70:e6:e5:d1:a4:99:54:
         1b:d1:b9:d2:c1:a0:4f:b8:a1:5b:43:de:14:d5:84:23:3d:f7:
         4e:36:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----