Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
File:                     aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer (raw, json)
Hash identifier:          2ckXH67/NK7iO+BAd9HAM5IVQEYKhT+Vq2gKZoAZt3s=
Subject key identifier:   68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425218271F772F3D3F9F0C20574453389
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 29275
                          IP: 195.137.196.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:82:71:f7:72:f3:d3:f9:f0:c2:05:74:45:33:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=683b33dc7218b3fe883c49505134cb39a664fd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:32:42:d1:3f:7c:83:cb:85:a2:ad:c5:18:
                    5d:ac:4a:64:45:8c:d8:5e:24:c6:d5:b6:11:a6:1a:
                    3c:d8:0b:c7:10:b8:9e:49:2e:6c:6f:f2:17:39:7a:
                    67:bf:6b:31:b1:c2:03:51:26:01:03:b4:fa:66:5d:
                    a8:be:37:8d:c1:95:e4:64:10:86:da:46:35:24:46:
                    d4:4f:5c:ba:88:d8:9d:89:d8:c0:5f:c7:05:7d:f9:
                    e4:4a:72:03:a3:2e:3d:67:62:f9:db:2c:ec:20:38:
                    5f:ae:d2:9b:21:ab:dc:87:0b:6a:08:5c:d2:d6:38:
                    47:ac:aa:6a:c1:f4:ef:50:55:6e:d1:58:19:37:75:
                    25:3e:10:28:d1:dd:4f:ca:f7:f7:26:7e:5f:f7:64:
                    a4:a8:aa:12:06:31:e3:08:4c:63:82:90:45:6b:62:
                    b2:29:6f:c4:95:c4:49:aa:1e:d0:d3:ae:2a:91:3f:
                    f1:68:da:5c:cf:6c:4a:62:71:25:37:65:b8:ec:f0:
                    70:78:a2:e2:db:5b:42:4f:43:1b:7c:10:5d:b4:11:
                    46:91:74:50:40:8f:96:b3:33:2e:3f:c0:ac:93:55:
                    51:d9:3c:5d:3d:c9:88:3b:91:36:4b:76:1c:05:9e:
                    e6:f5:4a:9c:f2:c3:9c:21:8a:19:61:83:d1:b8:7c:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.137.196.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29275

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:d2:ac:2d:dd:37:01:f4:8f:e0:b6:ef:e8:07:fb:86:8d:
         e0:64:6a:9c:11:eb:59:87:f2:e5:79:51:62:63:65:37:e5:40:
         4d:13:3e:f5:79:5c:15:1e:d4:bb:77:10:36:db:c1:df:1d:83:
         73:27:a9:d2:f1:47:89:9d:dd:4f:e0:63:1e:a4:7b:5e:80:e0:
         d3:8c:28:e3:2b:fd:42:82:52:8b:f0:db:95:42:6a:ec:cd:34:
         aa:36:50:7f:26:e5:2f:f1:98:15:14:b1:cf:21:90:57:bb:08:
         7d:e4:3e:e8:ed:67:7f:8d:42:a8:e3:57:5d:b5:e3:ce:a2:b0:
         f2:53:00:0b:61:04:78:5c:da:9d:20:11:91:ac:61:5e:3c:31:
         95:b2:75:48:87:23:2d:01:08:d9:69:97:e0:85:26:e3:86:a1:
         3c:6f:a0:4f:0b:ad:99:87:24:e1:1b:d0:20:71:e9:fe:73:86:
         67:fc:fd:78:b8:c5:12:97:1b:35:0d:4a:14:48:04:4a:e1:4d:
         9c:9e:c0:ff:db:27:95:fe:dd:b5:52:6f:de:4d:2f:3b:ca:00:
         23:8a:31:4e:40:ae:83:a6:9f:c5:57:ce:08:f9:fe:46:9d:f3:
         b1:f4:45:5a:53:66:4a:15:b9:87:5b:6e:7a:15:12:9d:c8:c0:
         0e:b0:86:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----