Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
File:                     _eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer (raw, json)
Hash identifier:          0dThNjI4znzztoLuulXeh2pcW759bLIi9AuNUIdgHPk=
Subject key identifier:   FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B58C0876AA1DC7FEA0304C01CA164F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41064
                          IP: 91.203.184.0/22
                          IP: 193.93.124.0/22
                          IP: 2001:678:bc0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:8c:08:76:aa:1d:c7:fe:a0:30:4c:01:ca:16:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:e2:7b:90:43:bc:81:b4:74:7b:93:a3:18:
                    6c:22:f1:84:b6:18:c1:47:c4:37:21:dc:6c:cc:26:
                    30:d3:3b:7b:bc:e1:23:3e:ce:9b:1b:42:60:31:7c:
                    21:cf:46:7f:59:f8:d5:d1:b0:16:98:83:e6:30:bd:
                    5e:ab:08:57:93:f4:79:ea:3f:48:aa:71:55:12:d2:
                    fd:ae:b6:ec:8d:3e:c9:5a:b3:ba:f6:1c:39:58:b1:
                    3f:21:0f:c3:6b:93:38:ac:d9:cf:65:b3:93:fc:28:
                    51:4c:42:16:2a:a7:46:cc:bb:da:4a:51:dc:07:cb:
                    b0:a4:1b:d1:d3:fe:f4:4a:18:20:94:2f:04:f0:ab:
                    7a:08:64:54:f5:2c:07:81:65:44:72:09:87:a8:04:
                    70:f7:ca:cf:75:b5:00:d6:1b:20:ed:e5:07:59:25:
                    ab:2e:a0:83:32:72:2b:b8:1b:5a:65:ad:ee:f8:97:
                    59:a8:81:6e:90:5d:8c:13:be:6d:01:04:08:10:02:
                    2c:e4:1d:d8:68:00:ea:b0:b8:ce:72:fd:3d:2c:25:
                    f3:4c:43:58:4c:d4:e3:af:b9:ad:04:2e:9e:5d:d6:
                    60:2f:4e:7b:5a:55:24:0c:2b:69:ef:a6:9f:e8:f0:
                    c1:45:8b:ff:f8:18:a9:c5:dc:e4:31:3f:d0:23:40:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.203.184.0/22
                  193.93.124.0/22
                IPv6:
                  2001:678:bc0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41064

    Signature Algorithm: sha256WithRSAEncryption
         ad:8e:03:08:a8:9c:4f:57:fe:c0:f9:a4:fb:c8:cc:a7:ea:6a:
         16:70:3e:0e:55:8c:38:31:2d:a5:d7:5f:ee:da:78:78:f7:ee:
         b0:d5:7d:75:5f:27:b6:63:55:bb:93:7e:43:3d:89:76:28:0b:
         d2:f0:64:1d:ad:a5:a2:c6:e0:f0:3a:d1:fb:2a:81:2f:b4:06:
         a7:d5:e4:9b:0f:85:8c:15:6e:42:b8:a7:ec:0f:54:91:e3:7e:
         a7:15:3d:e4:ab:7f:ff:a6:f3:3f:1e:90:50:0b:9e:f2:a8:47:
         66:27:b4:45:ca:08:b8:35:7a:ae:41:5b:21:e3:d6:f8:8e:b9:
         88:7b:44:3c:a5:a9:eb:d8:b0:c9:c6:e6:63:53:a3:2c:29:47:
         ac:ad:f9:7d:4a:14:89:6d:f6:61:59:13:a4:7c:f9:6b:6c:98:
         48:6b:4c:29:ab:e2:fc:67:7f:97:31:b6:c7:df:b5:98:89:bf:
         2c:85:ec:5c:51:c0:ff:01:7f:73:d4:ab:dc:f3:3f:57:bc:b6:
         fd:f4:03:ce:55:c2:78:8d:f1:ab:1a:c5:d0:5a:3c:98:47:10:
         52:61:12:20:ad:8b:2b:06:3f:30:58:a4:62:e6:84:7d:f6:62:
         61:00:f6:8f:bd:f5:cb:a7:95:26:61:bd:20:09:44:17:df:7c:
         e5:36:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----