Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
File:                     aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer (raw, json)
Hash identifier:          C4w4FThHWZSbN0e2TUjnfXInv03uvy6zXwYkKcvWWYA=
Subject key identifier:   68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143BB3771D307A6626C7660B0EE026B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57677
                          IP: 37.46.152.0/21
                          IP: 2a00:6940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:bb:37:71:d3:07:a6:62:6c:76:60:b0:ee:02:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:96:e4:8d:e7:87:98:5b:2c:0c:68:91:50:
                    01:19:bd:b9:51:1e:75:d9:07:3a:ce:52:d4:41:e0:
                    91:ed:10:ae:b3:d3:04:e9:cf:b1:b0:35:36:90:07:
                    17:98:b0:db:97:01:dc:c9:e0:12:15:b0:99:35:91:
                    73:e5:aa:74:1c:df:e2:a1:9f:77:b7:c4:2c:a1:2a:
                    dc:58:7b:3b:67:00:ae:b1:73:58:61:34:9e:5c:3b:
                    11:6b:3b:9e:25:fb:a2:99:0e:56:6b:33:9e:09:b0:
                    a0:16:32:5e:11:be:d4:74:29:bb:ff:f4:26:4a:15:
                    e3:d6:3a:21:90:e0:45:c2:03:ea:8b:f3:c7:d9:fb:
                    0b:1c:73:7d:5f:db:49:24:6c:93:bb:0d:a8:dc:a5:
                    a1:e3:55:f4:06:32:8f:17:b8:b8:8d:45:ff:48:7c:
                    3e:80:14:b7:07:b8:b8:20:e3:7b:0f:19:6f:57:02:
                    96:ba:64:10:df:15:12:39:5a:a3:e8:5a:1d:f6:fe:
                    86:40:63:d7:87:9d:2f:a7:b9:9e:1b:0b:20:39:dd:
                    07:b4:77:e6:88:27:17:ab:8d:4c:83:c1:f0:a7:48:
                    7b:a3:8e:e5:16:a5:60:85:d0:f3:8a:19:9d:23:fa:
                    41:91:87:8e:8c:15:f9:9a:6e:49:dd:61:3a:0c:2f:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.46.152.0/21
                IPv6:
                  2a00:6940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57677

    Signature Algorithm: sha256WithRSAEncryption
         1d:b7:a0:b6:79:a5:41:48:c6:cf:5e:08:f6:d9:71:68:d6:47:
         7b:10:3a:28:38:3b:4a:aa:3d:e5:93:f1:a4:45:ee:4b:f7:07:
         70:11:27:fa:1b:73:c5:28:51:bb:ce:5d:41:ea:46:e7:16:94:
         c4:c4:27:19:0f:09:aa:8d:70:5f:3f:14:85:bb:65:ad:34:94:
         86:73:96:dc:62:7c:32:d2:d2:72:3d:a1:30:57:c3:1d:68:90:
         32:c8:d6:80:20:4f:07:c8:49:a9:03:59:d7:1f:72:ff:8d:f4:
         bf:1a:11:35:87:84:04:41:b6:d7:cb:30:e4:e1:f7:a4:92:e8:
         37:73:d4:1b:b3:93:d4:ea:07:bd:8d:e0:98:99:51:70:b6:37:
         b1:0f:f9:53:b6:d8:70:a2:b9:85:a0:f7:7c:d0:63:40:72:aa:
         93:df:be:2f:bd:6a:5b:7f:45:04:f8:4b:c8:31:4e:2d:1c:ba:
         da:cb:d3:3e:54:84:60:d3:5d:2a:de:08:7d:04:ee:4e:5b:95:
         23:28:90:57:5f:96:8e:1f:d4:be:96:95:a3:e2:82:86:14:45:
         cc:57:3b:4c:38:e8:e6:d7:8d:90:ad:b1:65:bd:63:77:9e:6b:
         a5:d5:49:7a:cd:91:e3:00:87:3f:e7:49:c2:8f:30:91:68:0c:
         2c:0d:ca:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----