Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
File:                     Vylib6kTE9VuTXZFVy_1gGH9T4w.cer (raw, json)
Hash identifier:          gejir36fc4kaikYj8E49mPto/PirunTa+w8o/8Uqv7Q=
Subject key identifier:   57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FBF981C6C0A4EFB5687467C3E83E8F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:1978::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fb:f9:81:c6:c0:a4:ef:b5:68:74:67:c3:e8:3e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5729626fa91313d56e4d7645572ff58061fd4f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:0f:fa:2f:1f:8b:7d:69:12:b4:e3:01:64:
                    81:a5:7f:c2:a4:ca:2e:e3:43:ad:31:2e:54:3e:51:
                    26:7b:bd:e3:08:0e:f4:d7:31:1e:67:31:de:0a:70:
                    38:de:8d:01:73:1b:19:fe:af:38:2d:49:0f:05:37:
                    84:b6:c2:68:bb:43:f0:24:20:39:6b:29:11:f1:fa:
                    2b:40:9a:16:f9:c7:2e:10:45:fd:47:38:66:96:0d:
                    1b:7f:25:b4:c9:50:62:f8:b7:12:0e:aa:d4:8f:0c:
                    ae:67:08:4b:c6:e2:c8:6b:e4:34:f7:63:be:de:ba:
                    e3:d0:6f:94:91:a9:11:65:48:0a:b8:e1:a3:c7:4e:
                    ed:dd:9c:ed:19:7d:73:f8:1d:f0:3e:7f:ff:34:9d:
                    5a:36:8e:d0:0d:9c:04:77:2c:db:42:d1:52:4a:4f:
                    30:13:17:f4:3b:67:d1:16:59:fd:00:74:bf:5c:4d:
                    48:4e:8b:00:a3:30:d0:cc:87:c4:d5:1d:15:27:53:
                    92:40:d1:68:51:e5:a7:39:0c:80:21:cf:80:32:2e:
                    13:6b:bf:ce:78:75:cf:76:76:aa:dd:64:74:4c:c0:
                    b9:ca:bb:f9:e4:1b:b9:d0:74:e5:44:fe:85:3f:70:
                    8b:c5:55:8b:d5:b8:f8:dc:42:b0:87:9e:86:b3:57:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1978::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:98:0f:93:12:7a:12:bf:33:02:8d:87:5b:4a:86:44:51:7b:
         a6:4e:90:62:58:9b:13:dc:f4:e0:6f:11:eb:0b:c7:af:32:df:
         1c:5a:73:d5:ec:12:44:9d:f6:bb:eb:a6:2b:75:43:ca:2d:c2:
         b7:e9:43:7f:45:99:b9:1f:d0:69:82:0b:5e:3b:5c:9d:84:8f:
         71:da:32:5d:e6:c3:eb:7e:dd:97:73:f6:f4:ae:1c:fd:91:6c:
         08:4b:40:3f:da:db:9e:eb:66:35:b7:79:09:e0:da:9c:6d:ec:
         65:f3:71:10:91:5f:e4:1e:b2:97:9e:8c:9a:44:f4:18:1e:91:
         40:29:4a:94:47:96:85:13:88:5a:4b:6c:fc:0a:f2:76:65:5e:
         1b:cb:be:74:17:c5:30:32:e4:95:7c:a9:f2:ba:6e:76:a2:3a:
         61:d1:00:ba:07:aa:31:51:7d:28:d4:ef:43:3a:6e:d5:66:25:
         7f:d1:f3:6f:73:3e:d6:d9:e0:7b:48:88:cf:f6:53:0b:06:7f:
         a0:79:b0:29:29:2a:16:f2:33:cf:2b:d5:bd:27:1f:30:4e:b0:
         f4:fb:06:e8:a1:03:f0:8a:12:ff:e1:45:c7:96:5f:23:97:97:
         68:06:cd:09:ff:5f:4d:20:a9:6f:53:26:de:92:ea:0e:14:da:
         a4:b9:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----