Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
File:                     _6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer (raw, json)
Hash identifier:          3IrRXVbj5AcTNX9BkY47//pDWCmbpPx3eshh3gLbLYQ=
Subject key identifier:   FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAB2095976BDF86B82DBCAC4B53288
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39224
                          IP: 185.253.252.0/22
                          IP: 2a05:fec0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:b2:09:59:76:bd:f8:6b:82:db:ca:c4:b5:32:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:e8:7c:00:5d:1a:64:8b:54:8d:09:cf:6d:
                    37:b2:3f:38:fd:af:dc:2f:c6:91:dc:32:40:6e:a4:
                    ff:68:d0:14:6c:fa:2d:0a:07:6a:d8:df:70:3d:fa:
                    51:ad:39:ff:df:ab:40:94:79:0d:5f:5a:c2:a7:54:
                    08:91:88:dd:6b:41:35:97:8a:ea:14:c2:db:c2:d7:
                    22:15:f4:63:73:ff:0b:b3:53:ad:50:ef:a8:b9:4c:
                    5a:19:d1:ba:42:f9:e6:ff:e0:c6:34:43:5e:c0:b2:
                    df:9b:24:95:7c:63:65:da:4e:48:e7:b2:49:45:3f:
                    97:1f:59:4e:d7:c5:7e:20:de:21:79:74:78:74:c3:
                    a4:10:8a:21:0e:64:85:ee:b4:09:5a:3e:20:26:7c:
                    91:61:0a:a9:40:33:b4:fc:6b:84:34:f4:8b:a0:73:
                    f1:b4:2b:6d:3b:1c:12:65:2c:89:24:f4:49:7a:7a:
                    42:37:fb:dc:ef:fb:4a:34:46:09:29:7a:99:71:69:
                    2e:82:44:1b:ef:a0:25:96:0c:16:34:8f:8a:db:07:
                    94:8e:35:30:bc:1f:b8:9a:a1:99:85:bc:43:de:9d:
                    fe:97:98:9b:d0:f0:c1:17:a8:70:db:76:9c:de:f4:
                    e1:71:fd:5f:54:56:35:cb:36:26:6a:5b:9d:d1:da:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.252.0/22
                IPv6:
                  2a05:fec0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39224

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:75:06:bb:c0:27:bb:d7:57:c0:ce:28:f0:b0:da:f3:9c:
         2f:ba:1c:57:38:09:55:2c:dc:4a:4f:fa:f8:39:7e:82:0c:5e:
         40:51:2f:7e:77:25:83:b6:41:5c:1f:4b:62:bd:ec:c7:dc:e2:
         11:2a:a3:8d:b8:cc:a2:8d:cb:97:94:33:50:45:92:9f:33:e8:
         5d:ae:a3:f2:72:b2:ed:27:45:eb:0e:81:4f:47:f7:3a:dd:84:
         da:c4:ee:28:3c:a4:15:a2:d2:5c:f8:34:4c:bc:f2:22:1a:df:
         1f:31:2f:94:a0:90:9b:9b:c4:de:c1:2a:96:57:82:1d:07:e9:
         3e:14:3c:b3:e7:68:c5:d6:17:df:e1:f7:e1:98:79:05:95:c3:
         8b:cb:16:58:c2:80:d5:aa:03:38:19:b0:ff:c7:42:0c:56:ac:
         82:7f:a3:80:b5:f4:d6:44:ce:a2:7d:83:52:28:d1:d6:58:40:
         b1:98:d0:48:36:b5:d2:58:1e:78:85:24:dd:60:ba:00:46:da:
         0b:1d:65:ae:27:b4:e2:4d:33:b8:dd:22:58:12:e9:84:e4:a2:
         11:82:e7:ed:38:b4:11:8f:d6:84:94:46:59:54:5b:8d:5d:ce:
         99:aa:f5:77:5c:1f:88:da:47:e4:bf:4f:fc:2a:fd:89:27:39:
         5d:4f:4f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----