Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
File:                     _cNlqvvg5FoE3RXpwjESHp6uqPI.cer (raw, json)
Hash identifier:          /wwI71nOAQaT+9myi6pShzobZZpXahQF3eXTM3vnuig=
Subject key identifier:   FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA7086AC3180131E2DD66932D38C6B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205116
                          IP: 212.6.35.0/24
                          IP: 2a04:5940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:70:86:ac:31:80:13:1e:2d:d6:69:32:d3:8c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:ea:f8:1b:d5:4a:62:62:b5:bb:cf:0a:cf:
                    48:a9:74:27:db:a7:3c:94:3e:6c:37:a6:4a:44:06:
                    7b:61:80:bb:2c:9a:ae:00:ba:74:2e:41:b3:c8:0a:
                    ba:43:7f:37:41:61:41:7a:8e:ed:6e:42:47:46:3d:
                    fb:0b:92:a9:fa:3f:5e:38:9a:49:73:f9:75:cb:8c:
                    5c:c5:cd:ab:6e:04:01:f2:d9:06:e8:ab:bb:bb:fb:
                    e9:12:e7:4e:49:12:63:ae:68:17:eb:03:66:ff:79:
                    6a:e8:5a:e4:ce:86:7b:02:ac:f4:6a:ee:37:17:ae:
                    de:15:94:a9:6d:af:cd:75:d2:82:8b:19:1c:9b:ad:
                    ba:cc:52:13:95:a8:48:aa:9d:b4:62:e9:06:e1:3b:
                    21:4e:09:bf:d0:db:58:57:bb:c5:6c:23:85:a0:98:
                    ac:ee:3d:e7:29:66:77:ad:42:cc:fb:4d:8a:d1:91:
                    b1:fa:63:e3:91:84:f9:95:31:fa:25:cb:a2:0c:89:
                    7a:b6:2f:2a:90:e9:f6:59:59:8f:57:a4:5b:e8:dd:
                    84:c8:5b:24:a1:8c:91:a9:f1:bf:bf:6a:ab:80:9f:
                    26:2d:56:89:be:23:3c:ac:9d:5a:16:f8:25:cb:55:
                    8a:5f:29:ba:37:b0:21:de:93:32:f0:d7:af:c7:f6:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.35.0/24
                IPv6:
                  2a04:5940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205116

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:e1:b4:1c:16:05:65:5e:68:c9:b4:7c:c8:20:67:3a:e9:
         a4:a5:b0:7e:8a:7c:36:a6:b4:ab:7c:82:87:01:1e:15:e8:36:
         60:3c:9f:1f:72:e3:aa:0c:d6:f2:0f:f5:55:f0:ec:fd:e6:53:
         54:bc:35:16:5e:52:77:69:5f:14:44:6e:06:e1:bd:92:7b:18:
         0c:fc:f0:35:36:91:8f:07:3c:67:8d:99:f2:61:a1:fd:86:e4:
         9e:a3:f3:f3:f9:9a:50:39:bd:aa:8b:75:df:c0:c5:35:7d:d8:
         e9:70:aa:87:30:75:03:0b:54:b5:a1:8e:fb:5e:04:6a:03:91:
         b8:c6:96:12:0b:b3:4f:ae:cc:a9:47:83:b1:e1:c0:0d:2e:1c:
         c8:4d:bc:cc:e8:dd:d8:3b:96:75:b7:81:57:8e:e8:33:2a:d7:
         35:6e:b3:30:ff:32:e0:7e:0c:0f:99:1d:b9:20:fe:0e:6b:a3:
         97:30:f8:82:5e:24:d4:13:78:49:00:55:f8:99:42:3e:b3:9a:
         ea:f9:04:14:71:da:24:01:4b:68:db:05:fa:b3:9d:e4:b6:a2:
         b6:fe:db:b9:16:0e:56:03:6b:5b:c1:71:51:d9:f3:4c:ec:3d:
         19:ef:64:61:6d:90:67:18:e1:52:68:c3:c9:9f:3b:cc:fd:cc:
         51:d9:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----