Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
File:                     V-L2mlyy1YBNIamwRboxSusaqh8.cer (raw, json)
Hash identifier:          nuukf+AuzzbX+dhn8I4N5nLexHOPvZho9YukGbv9ArQ=
Subject key identifier:   57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B22535E5AFB5095369F7AD2046C1A1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41951
                          IP: 109.205.224.0/21
                          IP: 2a01:5180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:25:35:e5:af:b5:09:53:69:f7:ad:20:46:c1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:fe:aa:3e:da:56:30:17:80:7d:7a:bf:0e:
                    9a:e3:e6:8f:61:27:aa:72:69:1a:32:10:6f:fa:72:
                    e6:df:c5:a3:96:a5:82:b7:da:03:22:ce:38:29:28:
                    43:c1:bd:c4:b0:1b:6e:3f:c1:90:aa:06:c0:67:7d:
                    98:c2:c6:03:7a:3a:f2:e3:be:18:24:d3:ad:23:b4:
                    dc:a0:e4:c9:37:71:b4:aa:8d:61:4c:35:9d:0f:55:
                    01:14:b3:55:6f:a3:b2:1d:63:fb:9c:03:a9:29:2e:
                    3c:5c:c3:b4:71:14:3a:6e:0f:72:ff:c0:04:b3:d6:
                    a7:fe:b3:4a:1d:fc:e0:a9:d6:cc:3c:2f:7f:66:ba:
                    54:63:b7:d5:3b:f5:1e:4c:6e:b2:fa:0b:5d:b1:24:
                    3f:a6:8f:cf:06:e2:76:81:5c:ab:ab:fb:23:d6:9b:
                    59:5a:53:17:70:89:c2:18:6d:3e:9b:2b:4b:43:f8:
                    7d:e8:57:f2:a3:59:dc:7d:dd:07:eb:9c:08:f2:96:
                    e5:8a:36:d1:f3:ca:e9:34:0b:96:96:5a:ce:1b:7e:
                    30:7a:4b:c1:e5:c8:82:30:91:9d:59:ce:f5:6b:f7:
                    e4:bc:d0:24:f7:ec:05:17:e6:9a:8f:0d:39:7e:71:
                    8b:2e:8a:1f:07:82:72:b5:31:3e:b9:c5:09:8c:23:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.224.0/21
                IPv6:
                  2a01:5180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41951

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:10:db:94:c4:11:5c:8e:02:d8:c5:dd:09:92:e0:bd:ea:
         1a:5c:10:5d:2c:18:45:83:c9:52:17:7c:2b:c3:0d:98:b8:72:
         b1:e0:64:a2:f8:29:0c:a2:0e:ce:9f:7b:ce:f8:3b:43:41:db:
         2e:83:af:4a:09:8b:13:b5:e6:3d:fc:aa:9b:a9:87:79:94:b1:
         b1:15:90:7f:a7:a6:d7:d1:9b:59:a8:c3:bc:15:6e:f6:71:91:
         9f:da:c0:f8:8c:4f:67:64:c2:ff:93:e0:be:d0:0e:37:33:61:
         b6:14:20:c2:4b:ef:aa:56:e7:78:e1:d2:30:ea:23:5c:50:49:
         f6:85:4a:35:9a:5b:3a:15:b9:70:c6:b5:a5:50:7d:32:73:73:
         8f:ab:17:51:59:73:33:b7:f5:62:cd:56:72:52:64:17:97:da:
         b4:74:ac:3c:4e:aa:fe:84:b4:47:bd:43:86:1c:54:ad:e4:d4:
         e4:03:a8:27:c6:88:36:a9:22:a8:ea:0c:a9:4c:d9:54:60:87:
         6a:b0:fd:af:e5:f1:d6:1f:e7:aa:6d:61:58:49:54:52:cf:0b:
         26:8e:01:09:9e:e9:78:37:2e:cd:64:0f:38:9c:c2:fc:59:6d:
         cb:bc:99:ec:3a:07:0f:ab:83:f3:6b:5c:30:fc:42:1d:2e:15:
         80:58:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----