Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
File:                     _RVIKmVgCaobyAUUg2jR69-PYsg.cer (raw, json)
Hash identifier:          Zz7v+6jHHxtJZ8tTSNeGnEvuSt3wlzdbvVidZl7+fk0=
Subject key identifier:   FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427483E527C1BDCC407185BFF3E88D33A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206362
                          IP: 2001:678:fdc::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:3e:52:7c:1b:dc:c4:07:18:5b:ff:3e:88:d3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:97:01:10:2e:36:25:4e:0b:f6:5d:c4:70:
                    7a:21:d6:76:33:63:ff:9c:7f:17:ea:34:5d:ba:60:
                    f9:56:5f:38:b9:1e:03:f1:74:c3:9c:21:d9:c3:d4:
                    08:0c:a3:8a:94:1a:51:cb:24:7d:37:28:c5:13:90:
                    21:29:9c:e9:82:74:69:1c:4c:49:56:95:b8:7f:35:
                    ad:7a:30:1d:1b:e8:df:61:45:8b:b9:d8:2a:99:30:
                    25:6e:2a:3d:07:29:61:82:97:a3:17:e0:5c:48:ac:
                    29:91:52:9c:a2:47:06:2f:51:87:e9:9d:63:79:2c:
                    25:36:c1:80:35:b7:0c:d9:83:55:47:ea:34:1d:d4:
                    98:e0:84:32:23:95:75:2f:fb:63:2b:98:04:be:00:
                    3d:7f:58:a9:bf:90:96:7f:17:fd:82:a3:25:ee:8f:
                    83:b1:af:b6:95:b1:d6:ca:e2:3c:eb:c0:d8:0a:f9:
                    89:69:70:00:1a:c1:21:f5:b5:3a:e6:fe:88:43:2b:
                    f1:1e:05:cd:fa:04:ce:a3:08:91:87:e6:8a:1b:16:
                    99:d0:0d:94:c0:b9:0b:9d:fc:9b:b9:d5:e6:93:36:
                    0a:76:5b:9b:b2:af:ee:99:92:eb:28:aa:2c:20:43:
                    98:25:15:c2:0a:71:2a:34:05:55:7b:9f:d5:9f:a7:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:fdc::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206362

    Signature Algorithm: sha256WithRSAEncryption
         a7:03:fc:68:4c:61:75:ec:83:40:fa:8b:28:72:6a:e6:13:a1:
         37:b8:17:ab:41:04:f7:22:d8:a7:91:f7:dd:46:22:70:2d:6c:
         7b:d6:fa:e4:6c:75:34:72:87:d3:11:0a:66:80:44:2f:69:41:
         7d:92:90:9f:d9:85:a2:9b:0e:0e:05:24:79:50:1d:3f:67:32:
         ab:86:68:42:9a:8a:6e:fb:f3:e4:12:58:a2:85:51:76:b2:ab:
         d1:21:2a:88:25:a0:d9:d7:70:89:25:b2:0c:f9:68:82:ce:23:
         9a:7c:fc:ba:0b:f5:fd:22:69:59:8a:9c:05:88:10:50:73:b2:
         50:49:af:c3:5f:3b:cc:3e:6d:23:f3:b5:14:95:81:89:58:d8:
         19:bd:42:0c:27:b7:ef:4e:35:07:32:87:30:99:cc:0d:b9:12:
         f3:dd:ba:f3:58:59:f6:0b:51:b5:b0:83:51:8b:ea:59:cc:ad:
         21:59:fa:f3:8a:1b:ed:4c:78:19:26:0c:30:93:10:66:6e:dc:
         1b:ce:8c:36:51:95:9a:7e:d0:af:54:ef:c7:23:b1:e6:76:2e:
         5e:8d:e7:3d:fc:5c:65:f1:cc:67:4a:b2:33:8f:fe:68:14:69:
         dc:23:62:b8:69:88:49:2c:12:bf:c1:50:3d:a2:44:ab:bd:ee:
         6c:48:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----