Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
File:                     _l1M3gmNHKh_Tgqe64VZKOg9KT4.cer (raw, json)
Hash identifier:          4DcfU3BBXEObBWAU6B3n79aEXK8QkdAXOFM1bQny+d0=
Subject key identifier:   FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C9D6B6B5E3B63DA3E6DA5F34448FC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200149
                          AS: 215877
                          IP: 2001:67c:2f08::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:9d:6b:6b:5e:3b:63:da:3e:6d:a5:f3:44:48:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:a8:5c:0c:c1:11:9e:b4:1a:ed:b7:67:68:
                    dc:c5:19:23:ce:10:00:2a:c5:62:5a:10:43:85:6e:
                    17:dd:fc:76:2e:4f:ca:c3:f6:7e:0f:2d:75:91:e5:
                    6a:8d:ec:cd:b3:5e:88:e1:d8:6f:3c:a2:82:ed:af:
                    b6:82:26:53:7e:34:51:de:2d:b7:f7:a7:1a:93:cb:
                    bc:e9:76:c2:8c:5a:9a:48:de:6d:be:3f:30:e9:d3:
                    f4:1f:ff:e9:29:5a:22:25:b7:86:10:9a:73:e3:82:
                    31:0a:5d:df:82:b6:87:dd:8e:18:49:a6:b3:f3:92:
                    17:c0:db:55:b3:ac:49:d2:2f:b5:28:57:18:87:f9:
                    be:82:89:88:70:8b:d4:1f:34:82:07:03:c1:10:f2:
                    f2:37:29:5e:6e:22:e0:8f:54:ad:b2:dd:f4:ab:10:
                    96:6e:a8:ad:9a:46:ae:b7:a1:47:cd:81:d3:9c:09:
                    7a:bf:6b:bb:52:af:5e:02:86:6a:08:2b:e3:9f:7e:
                    03:0d:ae:6b:fc:cb:d0:8b:a1:ab:b6:eb:f6:8b:22:
                    d6:57:f1:de:5c:fc:9e:95:fc:03:22:80:fb:b8:73:
                    28:f5:d0:ec:a0:db:34:b3:73:be:49:7c:1e:da:18:
                    7e:91:3a:85:a9:df:1a:86:e8:87:7e:31:aa:9d:51:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2f08::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200149
                  215877

    Signature Algorithm: sha256WithRSAEncryption
         21:1b:b4:aa:b6:64:60:42:bb:84:66:7c:29:80:95:74:a6:e7:
         51:e5:55:db:ca:1e:8d:d8:05:58:07:b4:42:f7:f7:2c:13:91:
         28:16:38:09:e4:1c:58:64:72:39:42:3f:b6:99:97:a2:92:d0:
         a0:fe:e4:96:6e:50:60:b9:61:c1:85:fd:57:42:40:07:db:d0:
         ec:6c:2d:70:15:1c:55:18:ac:00:e9:d3:58:cd:a5:55:f2:e5:
         c7:66:8b:a0:53:be:48:66:ab:ab:46:d7:89:2c:42:67:a9:bb:
         a7:df:79:86:ab:a9:be:e9:a8:a6:e7:82:56:d4:e4:2c:d1:7f:
         95:fb:47:8f:e8:a6:7a:7c:a1:70:ac:9c:8c:60:21:80:8f:82:
         f9:ef:a2:27:41:09:df:9c:db:0c:b5:78:f3:24:f1:52:8a:4f:
         06:dd:bc:a3:18:e5:2d:fc:80:c1:ed:7e:fa:7b:c4:53:fc:ce:
         25:91:5d:42:2d:1c:27:13:4d:22:78:64:58:f1:9d:4f:83:88:
         1d:2e:15:b6:8a:ab:59:16:6a:19:59:2e:19:88:7d:5e:93:e8:
         79:0f:48:f2:ec:68:fe:58:5e:cd:32:92:ae:1c:c3:63:01:de:
         a6:f3:c6:ad:ef:f3:69:b1:78:f3:6c:77:2e:21:52:c1:d7:a9:
         9d:c4:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----