Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
File:                     VQlsYRU9KrVQd_GjDCRZhgAbodk.cer (raw, json)
Hash identifier:          1z5/ZXXU1OTj2CgY4/ljZB1q5nAKrVVDFBed9xihakE=
Subject key identifier:   55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9AC08A039467A6584538FD4102C4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205934
                          IP: 195.245.235.0/24
                          IP: 2a0b:a340::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:ac:08:a0:39:46:7a:65:84:53:8f:d4:10:2c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=55096c61153d2ab55077f1a30c245986001ba1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:2e:7a:e4:64:53:a5:93:b2:7c:98:8a:d9:
                    13:42:eb:fe:17:7c:64:3a:9c:35:aa:e4:f6:2a:46:
                    45:3f:28:91:18:23:73:1c:6e:ec:91:98:51:34:c1:
                    18:d7:a2:11:15:4d:f9:39:b0:16:75:e4:f6:0f:4f:
                    dd:75:f0:99:9f:4c:5c:67:98:ed:0d:a4:6b:3d:5a:
                    6b:aa:c3:19:c0:1a:89:e7:37:b2:7e:39:59:11:e6:
                    76:ba:24:35:b0:4f:fb:a7:6d:5e:1f:24:66:69:39:
                    4c:d7:6f:8f:2c:54:ef:ff:85:7c:f5:d5:25:70:bd:
                    87:ea:46:2c:70:8f:51:5b:4b:af:ea:ed:ff:06:aa:
                    88:71:cc:3c:33:61:3a:cf:af:7b:35:43:2e:05:ee:
                    5b:7e:81:e6:11:45:ff:a6:fd:a3:8a:4f:b9:38:14:
                    1a:39:64:de:87:1f:68:31:f3:5f:5b:e7:f4:e3:3d:
                    65:df:48:2c:be:74:b8:2f:ad:aa:cd:22:41:67:6c:
                    e0:94:02:a8:86:a8:1a:41:af:4a:36:17:35:f0:b1:
                    79:f1:9b:a4:fc:54:3d:4d:8a:18:12:9f:29:36:b3:
                    e3:08:5d:49:fc:73:48:ef:d0:b9:de:65:f9:45:83:
                    65:dd:1e:48:fa:56:58:08:69:9e:92:2a:a1:db:34:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.245.235.0/24
                IPv6:
                  2a0b:a340::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205934

    Signature Algorithm: sha256WithRSAEncryption
         86:d7:fe:50:06:ff:61:33:54:d4:24:13:01:a7:21:03:c7:0f:
         35:b4:ed:82:55:81:be:51:3f:dd:db:b9:a3:bd:da:39:75:11:
         4f:4c:d5:ed:bc:e5:30:fc:c7:6b:c1:41:c2:16:aa:84:47:b7:
         a7:84:8f:92:85:b8:7f:f9:93:e5:9a:09:30:2a:85:67:2b:0c:
         37:b9:9b:ea:89:be:68:a5:c6:d1:9f:60:01:0e:e5:f9:50:36:
         a6:3c:7f:df:39:62:79:99:67:e9:8e:4d:5a:b5:49:cd:63:7d:
         f4:ec:dc:88:b3:e9:1d:51:08:b9:fd:c6:03:a9:3c:9b:c2:85:
         70:39:45:40:05:f8:37:97:f8:75:58:6a:b6:74:58:6a:b0:8d:
         a8:a7:a1:d9:49:e0:53:77:b6:2e:97:1a:a1:e7:d8:37:83:d2:
         86:04:63:e1:c1:b6:5f:f2:6a:b0:a5:57:5c:30:d8:c4:0c:55:
         c6:3e:ba:6d:c3:b0:57:7f:fc:8a:7f:17:de:ac:6a:94:4c:b6:
         81:6c:92:84:2f:46:ed:46:5a:5d:bb:e0:d6:76:bd:97:46:48:
         05:a0:f9:66:57:76:f0:ce:ea:97:06:3a:a6:e4:d0:8d:47:ed:
         e0:48:c7:6f:2a:d2:a6:71:13:6f:8e:cd:ab:fb:ff:92:a2:77:
         7c:39:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----