Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
File:                     _0cFo2PcHY0OpRybmh7L04B70FQ.cer (raw, json)
Hash identifier:          sx0YNdurVowG43WP0h9tHdCDiBFCvv7ZtDR/5DMO/Do=
Subject key identifier:   FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB14EC8D64078D94F78F0330A1FEBB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199346
                          IP: 81.24.248.0/21
                          IP: 185.12.156.0/22
                          IP: 2a03:2240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:14:ec:8d:64:07:8d:94:f7:8f:03:30:a1:fe:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:82:48:39:bb:ed:9c:61:19:d5:c5:1c:98:
                    cf:af:85:5c:b0:17:f3:c8:8a:ab:2e:4e:84:f3:43:
                    ad:9a:f7:09:dd:dc:df:ec:22:ea:28:87:1f:08:61:
                    51:ea:37:3a:e0:07:66:38:db:27:26:b6:49:c5:92:
                    89:74:12:25:f0:c3:7e:c0:14:9c:b9:5d:4c:87:5f:
                    cb:12:18:96:86:02:c9:c7:82:46:ec:bf:f9:e9:21:
                    c3:86:09:a7:6c:38:c3:db:c9:09:1e:11:d3:15:35:
                    44:58:c0:6a:f8:ee:d3:9f:c0:1d:8d:5f:01:14:e7:
                    d9:b1:84:3e:dd:70:b4:5b:15:e4:9c:86:6f:e8:a1:
                    c9:dd:fa:0e:11:6c:dc:ee:54:e5:f0:01:df:a5:c1:
                    27:4c:63:fc:3e:db:48:ae:7c:c4:3b:72:cc:d0:fd:
                    08:19:c3:12:64:ef:a9:6e:6f:e1:6d:f6:f4:1f:4e:
                    41:51:32:23:76:85:c8:d0:e7:c0:6c:d7:26:65:cb:
                    99:ab:6e:15:9f:8b:fc:0f:1d:8e:77:6c:ee:24:86:
                    bc:b6:02:e5:65:5f:c8:41:3c:ad:49:88:1c:01:6b:
                    d0:09:e1:70:7b:4b:26:3b:bf:10:16:8b:b8:71:9f:
                    15:e3:d5:e3:1b:77:c8:86:fb:8b:d8:8d:28:ac:fc:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.24.248.0/21
                  185.12.156.0/22
                IPv6:
                  2a03:2240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199346

    Signature Algorithm: sha256WithRSAEncryption
         41:f4:73:4f:4b:57:2b:92:94:8a:cc:58:04:e2:17:79:21:0e:
         66:59:fe:30:f9:82:fa:77:26:69:c5:0d:a2:9a:a4:1a:8b:74:
         e1:63:81:48:67:cf:17:e5:41:09:1c:f9:be:63:80:33:d9:e9:
         9a:d1:35:5e:a3:14:b9:eb:2a:6d:d2:d7:30:c7:b5:70:17:55:
         7b:3e:f1:8b:4e:15:9b:b8:f1:fe:ad:c2:92:c6:5f:66:b9:43:
         dc:0d:fd:f7:05:6f:39:97:90:46:69:c7:18:06:40:3e:d5:0d:
         9a:04:23:fd:ac:dc:74:d1:9e:82:ae:94:f9:7e:5c:7e:e9:73:
         63:ed:de:0d:e0:fc:15:e9:e3:aa:d8:e2:96:fa:b3:b4:36:e7:
         4a:b9:fa:13:3a:27:ed:92:72:02:13:03:ea:6f:aa:02:aa:12:
         b5:c1:74:a5:f2:c4:97:ec:d3:d9:54:cf:af:10:0b:b0:57:cd:
         ce:b3:a4:c6:88:97:d9:10:44:cd:a6:81:a0:9f:8d:f8:82:f0:
         c7:4c:b3:06:43:fc:72:43:85:96:df:a8:cc:e5:11:5b:a6:09:
         d6:ab:40:03:5c:dd:e2:9c:86:13:20:9b:8c:5b:a5:5b:a3:5c:
         c5:a1:5f:3c:b9:ee:f3:51:a7:78:b5:ad:af:8d:7a:12:42:4e:
         8f:a4:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----