Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
File:                     SMOd4l_6fq8CsqbYws9uLOtWK_M.cer (raw, json)
Hash identifier:          VRFM3fVVcnj0Ecl56V+D4H00fORGhbhiKGzBZTv4dLo=
Subject key identifier:   48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5B6F9BE98159AB8F3575B4C323CBF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42867
                          IP: 194.143.140.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:b6:f9:be:98:15:9a:b8:f3:57:5b:4c:32:3c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:a0:ea:c7:5c:b1:8c:78:c6:57:c6:e9:d8:
                    36:b4:0e:47:5b:6a:69:ed:2b:18:26:a4:40:8d:19:
                    8a:25:26:76:7c:97:f0:f6:25:95:82:d5:81:5b:4b:
                    70:fe:fd:ec:5f:32:41:86:29:c6:90:8b:2e:10:a3:
                    22:cf:4f:9d:b5:f7:be:a0:a3:0f:f9:53:21:07:5a:
                    77:19:e5:49:47:49:80:39:ce:28:be:01:89:b0:6d:
                    b4:2e:c1:f1:d5:4a:cf:22:a9:63:30:fe:35:43:27:
                    72:f9:9b:e7:24:47:d5:59:ed:cd:31:90:f6:44:4a:
                    9a:58:70:7f:94:f6:2f:a3:9c:99:16:34:b5:30:8a:
                    f4:25:f9:4c:21:af:3a:40:94:9e:0e:e3:1b:e4:17:
                    fd:65:2e:e3:1b:55:14:04:01:12:3f:a9:4e:1e:0b:
                    a0:79:04:3c:04:da:82:49:78:8f:1b:8e:0a:80:0d:
                    de:a6:56:ed:da:a3:e1:6d:79:bc:1d:7a:0b:d8:3d:
                    75:a6:73:32:d9:4d:c6:1d:f3:b6:6c:0a:8e:ab:cd:
                    35:b7:f4:34:16:b3:df:0a:95:bb:27:3d:68:87:fa:
                    a6:8a:44:d4:a5:95:f1:d4:1e:d2:a0:ab:6d:e0:2b:
                    ea:50:77:e3:82:27:b1:0d:f3:66:18:49:37:dd:2b:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.143.140.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42867

    Signature Algorithm: sha256WithRSAEncryption
         31:e2:e1:95:7b:20:87:72:cd:7f:e8:93:05:c9:6d:79:64:f1:
         d5:81:72:27:ea:c5:cd:0d:3b:0f:1d:58:1c:f2:ec:1e:8b:10:
         64:f3:0d:ae:95:2c:71:27:cb:88:32:fa:1b:b6:a5:7d:01:7f:
         c4:bf:47:4d:d1:14:db:b8:a0:ba:4c:a6:9d:3d:6d:53:23:c9:
         ba:0c:a1:3e:89:22:49:37:d2:e6:de:24:93:06:d2:50:57:ad:
         a7:a3:8c:34:0f:54:21:9a:eb:cd:5a:59:1e:26:20:12:78:41:
         a4:25:c9:52:78:92:29:2b:36:76:39:ef:26:b4:0d:c0:ef:90:
         25:27:8c:13:28:cd:f7:9f:2d:89:21:9d:42:41:30:a1:32:3f:
         a8:7d:82:71:ce:7b:1a:0d:81:90:be:6c:2c:b9:8d:77:dd:11:
         28:ee:22:ef:24:39:3f:8f:06:88:d1:35:e9:e9:14:1b:b6:e1:
         c7:9a:77:b5:89:00:a6:30:99:04:6c:32:e6:58:2d:ea:53:1b:
         d7:f6:d6:ab:3e:a8:2f:8b:00:6f:d4:3e:02:73:e5:a1:09:6d:
         88:33:14:98:d8:88:e3:59:11:5a:0e:f9:f0:a8:78:6c:bf:85:
         43:04:92:3d:81:59:2a:f4:57:3c:f5:db:c2:a6:c4:a6:e8:31:
         35:86:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----