Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
File:                     V3zQhta4KSWruLuBXmWIUlIuCSE.cer (raw, json)
Hash identifier:          elpwfMm1Rc3nu4YY0rYgEhIuHN0/1t7lM8e0y47mIgY=
Subject key identifier:   57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B20EF6A8294583798AB62331DC6D57
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44329
                          IP: 194.50.28.0/24
                          IP: 2001:67c:ac::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:0e:f6:a8:29:45:83:79:8a:b6:23:31:dc:6d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=577cd086d6b82925abb8bb815e658852522e0921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:24:1d:8d:67:69:18:fa:4b:d5:e8:ba:65:
                    d9:d0:67:21:49:24:c1:3b:00:34:97:79:39:9c:5d:
                    e4:3e:d4:bb:ba:17:f7:9e:68:7e:55:fa:1c:90:6b:
                    74:f8:09:cf:f9:63:92:ab:9f:fd:de:b3:38:8d:d9:
                    73:da:32:7a:5a:6b:83:3c:42:26:f3:12:ec:bf:68:
                    45:79:2b:6b:09:02:b5:e1:ce:51:19:d3:51:a6:c8:
                    c3:e2:3c:8d:0e:1a:14:b2:97:d6:7e:d6:71:e2:1d:
                    f5:0c:3b:0b:b5:cc:ba:0d:b2:68:34:4c:30:83:b0:
                    7d:4f:3f:63:44:82:d6:44:8c:25:d4:3c:37:a4:ec:
                    71:37:f9:ac:86:43:db:32:78:8e:ab:d4:97:53:bd:
                    c0:d2:49:14:59:35:5f:d8:a1:09:37:43:3e:2c:2a:
                    9f:70:a7:76:c5:ed:88:cb:07:61:32:fe:ad:2e:48:
                    8a:a8:57:5c:2b:92:4c:72:e6:70:77:e9:89:00:b8:
                    02:21:e7:72:ed:a3:d9:b9:80:a2:a0:40:80:1f:73:
                    06:1c:c8:51:be:47:ae:01:65:e3:f3:1f:63:13:e6:
                    2a:17:50:83:94:bd:29:07:16:4e:ac:fc:6a:31:63:
                    5d:4e:13:ba:24:86:4e:36:67:c4:bb:6a:78:e8:96:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.28.0/24
                IPv6:
                  2001:67c:ac::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44329

    Signature Algorithm: sha256WithRSAEncryption
         39:e6:fd:fe:39:04:11:2e:a3:92:f8:e2:71:f4:88:50:e6:f6:
         80:cf:ef:73:09:98:d6:96:8f:77:aa:94:3a:aa:09:ae:41:d1:
         de:4b:00:01:d9:b3:ff:e2:34:c0:e4:1d:54:96:ec:62:ff:a6:
         2d:d2:d6:cb:a4:00:c0:fe:41:79:48:f4:ef:9e:47:ea:a7:a3:
         a9:50:b8:df:67:73:ce:1b:d3:49:60:1f:0c:9c:8e:cd:5a:35:
         60:f5:5e:0c:71:0a:d6:11:3a:a6:d7:fe:19:d1:a2:7d:93:80:
         d1:2f:09:cd:7d:79:71:61:47:fb:59:d1:fb:98:b2:c3:fd:42:
         05:20:a5:0e:19:74:57:2b:1d:52:69:b6:83:59:13:36:85:53:
         a5:28:08:f5:3d:a9:6c:d5:c3:38:c2:d7:98:51:90:4f:80:8e:
         a2:0d:bd:b9:88:53:a0:54:62:c4:d9:da:b7:e9:a4:aa:2b:77:
         64:03:96:d5:06:57:fd:4e:c6:84:77:1d:c1:1a:f7:5d:20:10:
         ff:4c:68:d5:6c:38:fe:e3:97:32:c5:49:4f:44:23:b6:2f:52:
         1b:36:9d:0b:64:a2:85:08:a9:51:73:23:b9:39:93:ed:76:88:
         36:e2:b6:6d:bd:d6:0c:0f:21:db:b6:3d:17:5b:54:2f:cf:80:
         71:98:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----