Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
File:                     _-vVS_BapQ7OnFJtDNVd5ivbEfs.cer (raw, json)
Hash identifier:          4QrcOJt99IgnwANqG0bXXnCwzd+rDZgQaSS+j6g9g6w=
Subject key identifier:   FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747A137D1A00A22E44D4653D3B40918
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47481
                          AS: 57861
                          IP: 185.24.46.0/23
                          IP: 194.35.48.0/22
                          IP: 194.50.148.0/23
                          IP: 2a0d:fec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:a1:37:d1:a0:0a:22:e4:4d:46:53:d3:b4:09:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:6c:6a:53:e4:41:5c:23:6b:9f:d0:39:41:
                    77:2f:ad:89:86:98:27:8d:64:1c:d1:24:c3:b8:63:
                    40:b1:ea:26:37:71:cf:22:7a:d9:5b:d2:93:0d:cd:
                    d8:f9:72:da:12:95:c9:0c:72:b8:a9:8c:08:38:eb:
                    e0:82:f6:59:a8:2d:74:af:48:e0:8f:fa:4b:eb:6c:
                    a2:b8:4e:60:71:e3:c1:f0:f4:56:e8:1a:42:39:1c:
                    a3:18:c2:58:bb:f8:19:03:8c:03:2c:5d:47:2b:4f:
                    73:c0:b3:f9:eb:7c:64:04:17:14:9b:98:27:53:92:
                    05:a9:5b:bf:61:87:09:7a:dc:46:a9:57:6a:02:26:
                    6a:c9:a1:1c:bd:71:41:84:4d:e3:ff:92:4c:4b:01:
                    18:ed:7f:78:a9:c7:1b:f7:16:57:6f:9a:d1:ec:bb:
                    cc:ee:4b:29:9e:ab:c3:6b:f4:77:ef:de:ab:9e:0f:
                    09:21:53:e6:c0:a7:ec:e4:05:74:b2:3d:6a:0c:85:
                    3e:1c:82:aa:ee:64:0b:62:ac:a5:a8:42:9a:b6:08:
                    17:3b:bb:70:d9:25:bd:dd:ae:6c:a8:23:09:fa:fd:
                    95:06:9b:1e:4a:1d:05:f8:94:05:00:2c:85:8a:de:
                    ac:49:5a:da:ad:82:88:44:ba:ad:95:60:2a:d7:a7:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.24.46.0/23
                  194.35.48.0/22
                  194.50.148.0/23
                IPv6:
                  2a0d:fec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47481
                  57861

    Signature Algorithm: sha256WithRSAEncryption
         6e:91:bb:c5:a9:25:da:cc:ea:bd:fb:e2:29:bf:49:67:5e:d1:
         8e:c6:e1:ba:17:af:4b:ab:1d:22:1d:14:a0:dc:90:72:61:79:
         69:d1:56:e3:18:93:02:72:38:17:a2:10:e5:d2:74:1f:93:49:
         4f:a1:fd:2e:22:e0:7e:73:2e:c8:46:30:8d:62:dc:43:70:b6:
         49:59:46:a2:1b:64:8e:8d:af:cd:f3:62:9d:a6:d9:f7:a2:72:
         8a:9c:02:76:d5:b6:35:29:12:7d:7b:fd:e9:31:2f:4f:03:82:
         99:a2:4a:12:7b:30:13:07:55:a2:b7:75:8d:70:1c:2d:40:8f:
         89:bc:cb:d1:d3:b9:fb:95:0a:48:5e:47:3b:2c:2d:8d:e9:9f:
         42:66:6a:b3:fa:dc:af:d1:3e:c0:97:a7:59:11:dc:a9:6e:44:
         74:04:7f:89:05:e7:d1:0a:a4:0b:39:6e:5f:ed:71:11:6d:23:
         ef:4d:d3:b2:4c:dc:16:be:62:f2:73:17:1c:98:36:3e:67:f5:
         31:8a:de:5a:3b:84:b4:7e:4f:19:be:9f:00:20:15:b6:2d:71:
         26:78:99:78:44:50:5f:2f:f3:c2:b5:db:5e:49:91:e0:43:30:
         d2:7a:e4:18:77:68:20:01:b9:ce:e9:f1:b8:4a:88:7c:fd:1e:
         22:86:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----