Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
File:                     a-tglLyrS9Ox9vVsUYK6EiDiK28.cer (raw, json)
Hash identifier:          QgO6ZEi0WPYAwhavLPSrTN4cahyfpfk0bhovMuUKPBU=
Subject key identifier:   6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DD000F5ED2FBDE01308FD1199A1D8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 28928
                          IP: 194.11.172.0 -- 194.11.187.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:d0:00:f5:ed:2f:bd:e0:13:08:fd:11:99:a1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:6c:b6:1f:f3:49:1e:5b:af:4c:80:8c:76:
                    96:c2:42:82:43:47:6b:c3:3b:9a:b2:81:da:49:8c:
                    ca:e5:5c:e6:c3:10:55:3f:f4:cb:c2:bb:6d:95:54:
                    36:9f:0d:ca:df:ed:fd:85:b6:4c:db:e5:5f:4a:6f:
                    46:ce:46:b0:a6:eb:d0:2a:84:6f:e8:48:85:ef:e8:
                    dc:07:5e:30:03:69:36:84:9a:0b:95:4b:4c:b5:98:
                    80:3d:fa:86:c8:bf:26:41:9c:45:bf:73:86:50:93:
                    24:83:f1:ca:34:4e:3a:87:ff:9d:7d:55:6f:5f:41:
                    0d:e4:92:71:77:2b:4c:ca:9a:b4:ff:1e:c2:c9:a3:
                    c0:d2:06:56:c9:85:f5:95:af:33:2c:dd:5c:fd:ea:
                    b7:e3:9b:25:f9:0a:29:6e:7b:1a:f5:45:27:3f:3f:
                    26:bf:cf:1f:51:b9:b8:25:04:84:c4:20:df:29:7a:
                    5a:84:df:43:bd:17:0a:42:c5:72:89:f6:35:d2:dd:
                    fd:38:1b:74:ef:81:99:ea:af:c1:cc:26:c6:9e:b8:
                    f6:6a:33:44:72:28:84:a4:79:c1:03:d9:33:f8:eb:
                    53:c6:51:39:a6:63:9d:7c:c0:04:3b:42:57:cd:66:
                    af:1b:2f:60:48:7b:35:f3:3d:7c:94:0e:01:41:38:
                    5b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.11.172.0-194.11.187.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28928

    Signature Algorithm: sha256WithRSAEncryption
         91:75:ea:c2:f0:ad:4d:43:26:89:3d:c4:3a:9b:cd:45:60:ed:
         e2:46:c3:01:00:a4:15:cb:93:a6:7c:a4:ae:41:07:28:1f:01:
         bd:19:1a:b3:0a:65:24:f8:48:ea:69:87:43:70:6b:82:1f:43:
         d8:79:9d:63:1c:f5:6a:14:eb:6a:dd:58:30:b0:f6:1e:da:b8:
         59:fe:ee:e2:e9:97:e7:8f:3e:e3:1f:b7:7a:26:b0:73:0f:87:
         1b:16:1c:e3:e0:6d:08:df:3e:22:c7:19:ce:ed:c6:34:c2:bc:
         4d:61:9c:79:5f:8f:31:e3:81:b5:ae:b8:80:2e:bc:aa:e1:8f:
         ea:d1:cb:2f:bb:7a:23:ff:da:63:31:61:26:3f:22:e9:ee:2b:
         c0:b2:0c:30:b5:c5:c6:01:70:36:e5:e8:2e:16:ae:bb:6b:5a:
         f6:d9:6d:71:5e:14:58:04:c1:f8:97:5a:7b:7d:ca:db:72:3d:
         92:8d:d5:9c:a6:dd:10:eb:fb:3f:0d:c6:7e:02:c4:e8:25:1f:
         31:5a:cf:40:8c:06:fd:ce:38:22:c4:65:d5:ac:98:f8:61:66:
         c4:20:61:fb:cd:40:9e:7a:48:84:20:fc:8d:f5:d2:60:1e:10:
         5e:71:04:62:f3:52:fe:ac:b3:c9:78:92:97:a1:cf:7a:40:8d:
         2f:69:27:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----