Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
File:                     Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer (raw, json)
Hash identifier:          9y0GrfE1GiHchK7NiwvGMu6zbga1PlXhMUff3CzoRmo=
Subject key identifier:   3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAAABA21C418BB38C3724AD0CF1086
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212257
                          IP: 185.160.96.0/22
                          IP: 2a07:bc00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:aa:ba:21:c4:18:bb:38:c3:72:4a:d0:cf:10:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:b1:ac:93:2c:6a:dd:2b:e1:6d:6e:ba:8a:
                    6d:9c:a8:a6:28:8e:07:91:00:4b:e7:e3:25:00:b1:
                    34:44:22:e5:7c:b2:35:19:7c:59:02:2d:67:e2:54:
                    a4:b3:ac:f1:ce:7a:6e:17:1c:a0:50:d5:40:bf:5d:
                    ac:02:61:e4:ed:65:ee:a3:df:ed:95:ad:87:31:17:
                    3e:f0:5f:32:0d:49:d4:0b:b8:0e:95:12:74:da:54:
                    61:fa:60:8a:33:8f:1b:c5:4f:e4:de:7b:c6:fc:43:
                    e5:4d:55:48:c2:4a:5d:03:2b:dd:b7:fd:8f:e2:dd:
                    a0:dd:bd:36:d6:83:ea:be:3f:d2:47:03:1a:21:73:
                    ed:64:e9:1f:16:07:79:a3:f1:ad:e9:c9:7d:78:36:
                    bb:11:cf:b4:09:92:eb:2f:66:17:54:c5:a9:b3:b2:
                    f4:c0:ae:e0:19:42:93:da:9a:da:2d:06:93:a3:51:
                    77:81:42:55:03:54:8e:ed:18:ba:dd:54:bf:ca:e7:
                    dc:92:dd:0c:2c:e0:c6:01:da:28:07:c9:41:0b:a5:
                    f3:2b:18:28:99:19:9e:78:20:06:eb:e7:fd:65:03:
                    0c:90:fe:8a:e4:76:2c:87:65:2c:66:e2:e0:e0:db:
                    61:79:a3:4f:08:62:31:ba:dd:d1:68:af:c6:5f:e9:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.96.0/22
                IPv6:
                  2a07:bc00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212257

    Signature Algorithm: sha256WithRSAEncryption
         14:62:aa:49:cc:4c:c9:fa:9d:b2:e4:71:54:c4:be:d0:d7:84:
         ff:91:49:47:8d:37:5b:a6:52:9d:1d:56:98:72:8a:ab:30:59:
         45:05:78:38:da:fe:1b:bf:77:70:b6:72:53:58:cb:99:3d:1d:
         95:d5:9c:b5:4a:a7:d4:1b:75:3e:e0:ec:23:dc:ea:67:e1:e9:
         00:51:57:9b:27:5a:56:da:2e:9d:21:0b:07:3c:37:8a:7d:4d:
         93:d2:cc:78:46:ee:b8:cc:5d:05:24:ca:ea:be:ad:55:43:eb:
         bd:27:8d:4d:a2:4c:2d:00:1c:74:7e:77:0b:58:9e:43:06:4d:
         1b:f6:3a:dc:21:ec:ad:2b:cb:8b:3f:d8:19:79:78:3e:59:df:
         d4:f9:a0:ba:08:ac:89:47:f8:b7:e8:c6:d2:f2:d9:19:19:81:
         1b:43:19:8f:3e:d4:0c:48:38:ba:af:01:71:c8:07:19:11:70:
         3b:d3:37:60:1f:7b:f2:d1:b0:88:d1:fe:b2:5c:08:ba:a6:46:
         3d:98:75:e0:be:28:dc:59:e8:5f:f4:06:f0:49:54:72:b9:d0:
         f8:71:db:ea:6e:85:c6:3d:d3:e7:16:ee:1b:6d:0e:ba:2a:db:
         53:25:39:12:d4:07:8d:53:73:b2:0d:c4:10:56:49:a3:b0:47:
         af:9c:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----