Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
File:                     X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer (raw, json)
Hash identifier:          zSJSC10RPQ/R0eyoXmBMTY0VxbxeaGMO0IMG7PU3274=
Subject key identifier:   5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424453889F4998B2741F1621C6C8FE6FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201606
                          IP: 185.69.80.0/22
                          IP: 2a03:2fe0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:38:89:f4:99:8b:27:41:f1:62:1c:6c:8f:e6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0f:ff:21:a0:80:9b:15:3d:bf:29:33:3b:82:
                    d2:20:98:f3:9f:0f:9d:08:07:e5:50:f9:c8:35:4f:
                    87:94:3d:f8:36:94:55:9b:1e:4d:fe:3e:82:53:95:
                    38:70:fe:9b:97:56:b3:a1:d6:44:15:d4:0c:8e:4f:
                    97:ad:4b:d0:d3:92:0c:6c:af:36:58:d6:9a:cd:2a:
                    fd:e9:e9:b2:10:69:65:e8:fd:af:48:44:52:c5:ea:
                    7d:12:fa:05:8e:63:33:50:b7:58:4d:e7:8e:b9:a5:
                    6a:f8:fa:52:32:fd:35:03:3f:4a:15:8f:1f:dd:45:
                    8b:65:4a:5a:18:a7:63:09:d4:1c:cc:f1:3c:40:d9:
                    c4:ff:6b:c3:af:53:e2:de:40:25:3e:2a:05:42:24:
                    b8:36:92:81:a9:59:1b:6e:de:e3:72:b6:cb:20:08:
                    0c:98:57:9c:7a:f3:be:6c:a6:73:4c:ff:76:02:5a:
                    a8:b2:ad:b6:a3:ad:bd:a2:9e:c8:3a:36:2a:79:ed:
                    32:44:6b:8f:b8:0e:af:8e:4d:4e:69:35:4b:60:fb:
                    7d:57:5b:3f:13:fc:ac:48:d4:a6:7c:45:a4:2a:a0:
                    19:00:56:33:99:5f:23:d9:ce:28:c5:a0:d6:38:8d:
                    64:0c:5f:97:9b:95:72:2b:02:a1:d8:e6:c1:53:41:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.80.0/22
                IPv6:
                  2a03:2fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201606

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:66:ef:45:cc:2c:34:a7:ba:d3:ab:27:86:17:bb:69:ac:
         9b:3c:d4:23:0c:9b:57:d8:47:bd:92:6e:7d:45:f6:9a:0a:ef:
         25:b2:8a:37:28:5b:5a:18:b0:e9:ea:21:1f:3f:db:7d:02:15:
         2b:9d:2a:87:f7:e3:3b:88:2d:dd:a4:fc:77:cd:50:f0:c2:5e:
         93:c3:23:3e:32:89:0e:bb:35:f1:6c:ef:63:4f:eb:80:d4:cd:
         26:26:28:48:05:9d:67:65:fa:53:c0:0d:bd:77:c9:e3:43:2e:
         44:f1:d6:9d:47:ba:d1:51:39:d4:c5:88:4f:e5:59:8b:4f:db:
         1a:56:6f:f7:ff:aa:af:fc:ac:7a:d0:19:be:5c:32:65:13:f9:
         60:72:11:f7:6c:7f:62:74:ec:c9:32:80:9c:41:96:d1:6e:64:
         4e:50:29:06:6b:87:9f:93:0b:5c:6a:5b:24:18:63:9a:61:35:
         13:8c:b5:97:24:6e:41:32:95:9c:65:f7:cc:50:9e:50:25:b5:
         7c:db:28:6d:8c:2e:49:1e:ea:a1:94:36:64:18:13:fc:7e:12:
         3b:5a:71:dc:74:cf:84:e8:7b:3c:96:6c:91:5a:c0:a8:2c:4d:
         ed:1c:66:61:b3:dd:bf:cb:d8:40:35:31:08:24:eb:e8:ce:f8:
         a2:88:3d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----