Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
File:                     _1VJGZMcZ70mUPxODHPC-z4ijZU.cer (raw, json)
Hash identifier:          zpV7w71XMpZoxUpimUd/LjeloedcmlGXuZEexmSIu/A=
Subject key identifier:   FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143BF675C5D7917656F84A88751A1E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58151
                          IP: 176.117.96.0/21
                          IP: 2001:67c:2988::/47
                          IP: 2a03:8c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:bf:67:5c:5d:79:17:65:6f:84:a8:87:51:a1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:7d:00:f7:71:42:57:7c:c7:68:36:ca:4c:
                    36:4b:6e:ca:9d:db:32:ab:a3:01:1b:ef:45:3c:a0:
                    07:df:1a:cd:2c:b9:84:c6:1b:ef:7f:18:a6:4d:dd:
                    7f:e3:a1:25:81:08:e9:9b:7f:41:38:bf:32:ae:b7:
                    38:89:18:bb:8d:15:f8:44:d5:28:6c:96:fd:1d:34:
                    fc:c1:76:00:3b:07:f4:22:4a:48:13:99:69:0a:72:
                    5c:e8:fd:7f:b3:52:fd:f6:19:19:ef:88:4b:3b:60:
                    c5:e8:7b:e3:a5:cb:56:6f:38:47:f2:bd:4c:40:ab:
                    19:e2:42:24:10:1d:89:57:d0:34:e7:fc:be:84:4c:
                    79:02:8e:1d:48:a3:5c:60:d3:1f:82:42:fb:65:ec:
                    87:5d:e4:e9:95:85:5b:8e:d6:28:30:a9:27:7f:3c:
                    ee:2c:ab:ae:75:1d:f8:cf:c4:15:9b:65:35:94:33:
                    60:14:97:2a:87:e8:f4:4f:13:ed:d6:28:cb:47:4c:
                    31:ad:92:1d:89:3b:a4:c7:3d:e9:96:f3:69:96:ad:
                    ea:96:9d:d9:8a:8b:b1:d0:96:6d:3f:1b:66:c0:f4:
                    c7:53:6a:f0:c7:27:0a:2e:8d:7d:76:08:3d:fb:66:
                    8b:53:c1:0c:67:6f:72:7b:74:9f:5d:6b:cc:e6:08:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.117.96.0/21
                IPv6:
                  2001:67c:2988::/47
                  2a03:8c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58151

    Signature Algorithm: sha256WithRSAEncryption
         56:85:59:b9:6b:81:28:5f:e7:d8:cc:18:53:84:98:96:60:01:
         6f:f8:b8:09:82:5a:cb:aa:10:01:96:d6:02:69:19:13:34:2c:
         6b:96:98:7c:53:3a:9a:40:24:08:26:65:9d:1e:0e:70:af:62:
         66:c5:70:56:6d:04:97:e3:55:5f:45:fd:af:46:3d:0f:54:fc:
         7e:21:de:0b:6e:33:ad:50:3e:2d:5c:90:13:77:88:7e:83:1c:
         70:f2:e9:57:8c:40:1a:70:1d:3f:76:88:45:1a:8f:3c:9f:e6:
         d2:f1:0a:78:2a:9d:ac:d1:48:c7:5e:2e:53:d9:bc:4c:39:14:
         60:cd:f7:fe:96:dd:87:73:03:79:92:b0:8b:8a:73:a0:f3:db:
         07:b3:5c:9a:d0:aa:8f:c4:af:a1:8e:b2:eb:a3:7f:1d:0a:d5:
         f3:cf:86:a0:00:19:22:40:70:e4:e0:b6:45:ed:41:00:c6:1b:
         02:38:b1:d2:bb:4a:fe:50:3b:87:45:c5:59:ad:88:83:c7:0e:
         0b:44:df:d9:48:fd:95:02:03:cb:ae:e5:45:3d:d4:cc:75:a7:
         cb:17:4f:66:cd:2a:27:60:12:58:0b:7f:47:45:e4:52:67:2c:
         20:dc:d7:fd:1d:86:12:31:5c:85:3b:bb:f3:af:3f:d7:8e:be:
         2d:51:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----