Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
File:                     SktRP35EbgzW3P5Wgpu8n-SY0-g.cer (raw, json)
Hash identifier:          JWVjj0Hx6py9XFhUAG7y2yRutNADRVnoldMBli1RbZk=
Subject key identifier:   4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143E82BB38CBFB3432DC78BC7ACC9CE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 15791
                          AS: 41696
                          IP: 89.221.176.0/20
                          IP: 185.109.232.0/22
                          IP: 2a02:e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:e8:2b:b3:8c:bf:b3:43:2d:c7:8b:c7:ac:c9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:b2:70:a8:8b:59:18:24:22:76:97:8d:94:
                    d7:44:76:cc:dd:3c:a3:b9:9d:cb:ce:3f:43:af:5f:
                    f7:30:ff:05:5b:b8:5b:81:58:28:bf:77:ea:36:59:
                    de:a8:70:4c:0e:03:67:36:14:86:09:b1:37:d6:e2:
                    55:2b:60:43:38:96:99:a7:8b:15:0f:47:77:98:51:
                    e2:19:a3:8c:b9:37:17:17:c6:24:9b:f1:4e:24:df:
                    0a:ff:50:4c:27:e1:cb:12:91:18:f2:5a:88:51:1e:
                    9b:5a:7e:65:b0:c5:be:5d:2f:89:38:e1:d7:70:87:
                    65:f8:e7:11:08:5f:82:92:18:9e:a1:a0:77:3f:e6:
                    2a:be:f0:93:45:8f:9f:ad:45:6d:a9:e8:0c:61:b1:
                    60:44:36:1e:7f:77:4d:61:ff:a6:b5:09:6c:6d:b6:
                    4d:ab:d5:2a:e2:fc:cf:24:fd:de:26:2f:86:c7:89:
                    37:2e:18:64:79:15:2d:a0:7a:fe:98:cc:05:d6:f0:
                    28:3d:b6:46:28:e3:12:b1:17:2e:8a:69:d9:b2:82:
                    fc:9d:a4:1e:35:2a:62:d2:57:f4:d1:b1:78:cd:bb:
                    4e:69:96:5e:be:73:3e:e1:c1:0a:7f:8e:52:c9:f0:
                    a0:c9:74:b9:70:05:f5:6a:16:30:d7:cf:f8:12:0a:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.221.176.0/20
                  185.109.232.0/22
                IPv6:
                  2a02:e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15791
                  41696

    Signature Algorithm: sha256WithRSAEncryption
         a2:cf:a7:77:64:ab:08:68:4f:b5:2a:69:0f:5e:d6:e2:26:28:
         ce:8e:7f:e6:5d:ef:d2:4f:4a:de:34:f5:7e:7d:59:74:80:fd:
         85:31:49:bf:d3:ab:91:7b:55:2d:3d:d3:ca:03:fc:13:ee:98:
         ca:e7:24:05:91:0e:12:e0:ae:83:e2:e0:33:41:19:c7:8e:61:
         9c:1d:b2:64:1c:3e:5d:c7:bc:d5:d6:28:25:14:22:21:33:09:
         48:c5:42:5e:f5:db:85:4e:78:4b:85:5d:51:99:86:3d:ba:ee:
         d9:9d:28:53:37:09:e4:59:1d:2f:2f:18:7b:8c:cc:b2:5d:67:
         86:37:66:49:b0:1f:78:04:73:11:9f:0e:e7:21:0f:97:ac:fb:
         44:0e:01:ab:96:52:43:85:44:f8:a7:50:41:d9:15:d3:8f:9a:
         aa:2c:03:c9:6e:f9:b0:fd:f0:68:8e:32:f4:14:84:df:e2:3f:
         00:74:3b:5e:b0:6d:6d:57:8b:1b:98:c3:b8:8d:ab:e0:3e:36:
         e1:30:ba:9d:a3:cf:9b:d7:d6:74:6e:f5:94:c5:af:42:88:5a:
         f4:4b:45:de:0a:34:da:87:fe:d1:ef:19:c2:6c:b9:b7:c1:2c:
         4f:d2:e5:ee:e3:27:3f:5e:6f:da:aa:c7:5a:f1:48:0b:7a:82:
         11:55:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----