Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
File:                     afY2pbazoordg_l0Rtewg7lMPa4.cer (raw, json)
Hash identifier:          YRmkd520IL6jB5GfvDEKkTqzl6MbPVcf853xwjthO+4=
Subject key identifier:   69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B237EE6FA4021FAE521E73F8C75AE2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214991
                          IP: 2a13:ad40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:37:ee:6f:a4:02:1f:ae:52:1e:73:f8:c7:5a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:cb:37:16:f5:87:d7:84:90:83:a1:a8:13:
                    af:5a:78:73:4d:73:35:e8:86:69:85:72:8d:3e:48:
                    e9:2c:08:01:f9:b2:0c:b8:2a:cb:d8:a9:29:0c:cb:
                    76:cd:d3:cd:58:77:30:21:b6:57:40:f9:a4:7f:af:
                    2d:10:c5:5c:e2:48:75:c8:e8:40:fd:cb:28:06:64:
                    aa:fe:04:d6:1c:84:2a:63:9c:be:3e:eb:e6:8a:a4:
                    23:d7:2c:ff:cf:31:8e:bb:b3:0a:a4:dd:e0:e9:79:
                    eb:b8:5c:d0:4a:51:5f:5a:02:2b:9d:0f:b8:b1:c2:
                    42:37:bb:3e:76:5a:66:6d:d1:73:c4:eb:8f:7b:93:
                    b3:20:62:37:77:5f:4b:43:84:a3:e0:c6:ab:52:a5:
                    d3:49:e6:93:a8:ce:cf:a9:15:c5:20:36:68:88:e6:
                    20:7d:4a:a2:3c:c4:55:a0:9c:08:f6:97:6a:37:3c:
                    52:d3:d3:13:74:0b:59:22:79:17:d2:ff:82:e8:96:
                    c7:86:5a:80:f3:df:a6:4d:8c:ab:56:bd:83:15:12:
                    b0:33:1c:43:72:71:73:3e:eb:c2:d2:30:17:f8:7c:
                    f1:2d:b7:8f:3e:f4:a5:ca:3e:66:99:09:74:13:4a:
                    d6:73:c5:d4:57:48:c5:c8:74:05:ec:a4:56:d2:07:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ad40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214991

    Signature Algorithm: sha256WithRSAEncryption
         43:bc:87:b5:18:d7:5a:0e:e0:d8:19:27:f1:80:f4:ff:6d:f3:
         8d:02:76:d1:03:ff:3e:3c:4d:9c:10:0e:10:1c:ff:55:ed:61:
         bf:c1:35:9e:05:d4:d5:d2:f0:5e:53:b2:c7:a9:85:53:86:d5:
         76:82:c1:0d:0b:27:c7:be:e7:7e:48:76:58:4d:b3:3e:f2:3a:
         04:ae:40:09:a6:ce:2a:59:aa:5c:dd:3b:fc:be:c1:68:0f:62:
         76:c7:f1:22:6b:f6:1d:d0:83:52:58:fe:c6:c2:fa:52:45:08:
         93:f6:38:ff:14:b3:c5:a9:81:3c:00:2a:92:ca:5d:d9:24:2d:
         27:dc:bc:b5:03:28:60:4d:a5:32:5a:a3:43:46:38:79:ee:0f:
         62:d2:0e:b9:de:f5:18:d9:c5:20:b4:cf:29:d9:43:ff:3a:00:
         5a:c8:a2:e0:80:a6:d1:9d:1f:80:af:d1:9f:60:89:6c:ea:b1:
         67:41:38:fe:ca:24:4a:30:89:56:ab:89:68:7a:af:32:aa:94:
         dc:f2:bc:14:27:40:d1:9d:08:41:76:6c:cf:67:85:b9:36:ba:
         0e:0a:f4:dc:b8:83:ef:cd:27:7a:47:55:4f:a8:b8:10:4a:bb:
         69:c4:d1:98:28:9a:ae:61:32:46:a3:2c:16:22:f3:cb:96:9a:
         95:46:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----