Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
File:                     cGdfald5fFypbD-0XlMb0yeDAWw.cer (raw, json)
Hash identifier:          r/XdcOWdB2np2Zts4EagQhPukc657sQxfsaotfSBH5U=
Subject key identifier:   70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC9A7E29EE0CC424CE06C0E19B7459
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198903
                          IP: 2001:67c:65c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:9a:7e:29:ee:0c:c4:24:ce:06:c0:e1:9b:74:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:23:a2:5b:fe:82:1e:a9:ba:6b:c2:a2:40:08:
                    d1:d7:4a:82:54:0c:9d:be:e7:5d:4f:18:e0:7c:18:
                    09:e2:26:f8:db:16:9c:48:f1:b3:45:f8:9a:a0:21:
                    29:c3:88:6c:06:39:cb:56:45:a1:d7:b7:c0:17:11:
                    fc:46:2b:99:1c:ac:dd:4a:c5:56:80:17:5d:f6:23:
                    0d:94:02:4f:51:17:f8:44:0a:bf:f3:2d:63:d6:ee:
                    b3:6f:53:fc:ec:b3:d5:75:b3:37:d3:ec:3c:6b:a9:
                    8d:54:04:65:f2:9a:48:22:cc:54:4a:2c:d8:b6:99:
                    cf:b8:38:e7:8b:1d:f2:c0:f0:2f:9f:5e:9d:93:00:
                    bd:0c:12:40:0e:c9:59:f8:d9:e4:b4:2d:14:81:83:
                    bc:3b:d2:82:54:a0:24:34:6e:c1:3e:76:f8:14:59:
                    4c:6b:0c:23:16:2c:e0:72:1b:cb:c4:0b:f1:57:ae:
                    b0:9d:25:8d:be:e6:14:91:7f:e2:74:16:9a:99:b2:
                    b5:dc:67:e8:0c:33:04:f4:0d:bd:54:18:e8:22:c9:
                    a3:a7:c5:56:8f:07:bf:07:23:9b:dc:74:cb:d2:78:
                    6e:ce:c4:de:af:24:db:ea:ae:90:6d:d7:1f:1f:e6:
                    ff:46:1f:87:1d:13:e5:41:09:d4:7d:c6:04:c5:59:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:65c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198903

    Signature Algorithm: sha256WithRSAEncryption
         15:a3:45:75:7a:f4:24:ac:6c:da:08:91:d5:f3:69:cd:0d:62:
         48:5c:b4:ff:18:78:2c:e0:c3:66:9b:fc:c7:78:94:f2:74:66:
         f8:52:c9:c5:ad:65:d8:7f:16:c9:e1:dd:fb:51:c9:8f:b0:cd:
         16:8a:01:ae:63:dd:da:11:c7:12:e5:5f:4c:96:ed:f2:ed:8f:
         a4:6c:91:4e:a6:73:7b:99:92:31:0e:60:36:e0:27:24:29:1d:
         ff:db:a7:6b:39:6f:e8:3e:08:42:4f:3d:81:4b:1b:63:5c:fe:
         c2:8b:b4:5c:27:b6:40:b8:16:6b:4c:9f:5d:0b:51:d7:53:0c:
         b0:e8:cf:72:8f:1a:74:b6:0a:4c:98:af:b9:2d:95:76:72:49:
         7c:62:d3:fa:dd:26:67:ec:8e:a8:14:f4:03:e3:ff:db:6d:86:
         74:0e:65:0e:06:ce:8a:56:4b:e5:68:ab:b7:f0:63:dd:0b:ad:
         17:93:72:f0:43:84:7c:43:5b:d2:e2:a5:eb:d1:41:67:57:3e:
         d5:08:0b:fb:48:97:29:7b:b3:df:f1:3e:6a:4f:67:43:06:ea:
         a5:b0:f8:36:7e:cd:0f:f1:5c:d8:36:81:87:1b:bc:bd:52:a3:
         15:20:a8:c7:8f:66:1a:54:b3:d7:dd:ed:5c:8e:c2:e7:64:de:
         1c:8d:a3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----