Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
File:                     SKGBKVSA9hv1hC13EvSV7CSacs8.cer (raw, json)
Hash identifier:          d1XixlpRWf4B9OgKMCZWHO0a1NGQBZj+WT2jNniB1XE=
Subject key identifier:   48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01953E4F442FB596F948670BD6872799CAAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 25 Feb 2025 18:12:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209155
                          IP: 2.59.220.0/22
                          IP: 2a09:fac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3e:4f:44:2f:b5:96:f9:48:67:0b:d6:87:27:99:ca:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 25 18:12:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48a181295480f61bf5842d7712f495ec249a72cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:43:5b:94:a7:17:77:82:9a:fa:0c:52:ad:
                    0a:b8:dd:40:72:23:65:a0:a3:7b:4f:68:83:04:75:
                    10:e1:8f:95:f8:79:8d:6b:c1:58:51:3d:71:8e:8d:
                    33:34:ac:4f:a5:6a:a6:e8:75:f0:a2:92:a7:22:de:
                    23:27:56:d4:ff:7f:0e:0b:ac:fa:b3:f9:79:fe:b9:
                    b6:b3:ba:b2:ee:ee:ec:85:db:7f:73:75:c8:ad:da:
                    86:c8:47:30:d0:e5:c8:3b:02:24:da:5e:6b:be:62:
                    38:ec:cf:c7:1d:49:a8:33:1a:af:f7:cd:a6:7e:72:
                    2b:09:fd:83:1a:48:b5:07:b6:ac:ef:d3:3c:14:a4:
                    df:ff:0b:51:fd:94:73:59:c9:8f:2a:d4:d4:01:d5:
                    99:bd:a6:51:e4:7b:bd:b2:0c:4f:76:9b:07:53:72:
                    6b:f7:0a:58:81:a9:6d:84:bf:96:91:70:55:99:e0:
                    7b:7e:c8:05:cd:a6:8d:32:5a:2d:93:4f:1e:5c:4c:
                    be:88:43:b0:fd:c6:c5:6b:76:8a:e0:d3:af:19:91:
                    db:c5:79:57:e3:e0:85:ab:20:0f:57:cd:83:74:6c:
                    3e:33:d4:a0:c8:cc:bf:a0:98:8b:6c:ff:5d:5b:49:
                    e1:6e:82:90:25:11:a7:6b:37:75:62:81:c8:0e:a7:
                    24:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.220.0/22
                IPv6:
                  2a09:fac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209155

    Signature Algorithm: sha256WithRSAEncryption
         05:a0:5d:91:cb:c7:b6:8f:22:17:6a:3d:02:ca:37:4c:fe:57:
         68:a1:f2:1b:fc:70:ee:e1:3a:e4:dc:6e:37:c4:3c:d3:9b:d1:
         2c:a0:a2:a4:cb:f4:19:78:44:37:57:a6:c1:48:20:d7:5f:3d:
         26:35:8f:d0:2d:c3:fb:8f:a2:66:e2:f0:50:b1:16:60:ef:40:
         80:57:21:13:e5:9f:63:c6:3a:99:28:a7:0a:6e:ce:b4:dd:3a:
         87:46:f7:6b:a1:7c:83:85:ae:44:6d:89:fa:0a:8a:4a:c6:a1:
         be:f9:d3:4f:ef:2b:b4:32:31:da:c0:c2:a9:33:e5:59:b4:cf:
         e6:42:7a:2a:14:a5:82:fe:11:dc:a4:08:87:7b:f1:63:84:d8:
         18:15:bd:bc:8e:71:69:23:4e:87:eb:e0:f8:e8:62:cd:5f:34:
         06:f0:de:49:8c:88:92:5f:49:bd:f0:f6:6a:9d:3b:08:d4:5a:
         58:99:bd:0e:67:70:55:a5:ad:5e:21:50:02:15:fb:6c:5c:fa:
         4a:5e:03:80:2b:23:3f:28:f0:06:c9:35:d5:74:9d:11:27:33:
         cf:32:05:57:87:41:2a:d3:20:26:66:e1:83:aa:e5:cf:48:81:
         7d:cc:99:cf:b7:51:47:80:02:98:0a:52:d8:44:cf:2d:b1:14:
         a7:f0:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----