Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.cer (raw, json)
Hash identifier:          k3SINnpGvpi4a6F6jvGKkTGNakFSJfbZ4+KEbaV8mZg=
Subject key identifier:   71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942826F15C4AE1CD6FEC283066A785D524
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:53:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209593
                          IP: 141.98.108.0/22
                          IP: 2a07:76c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:f1:5c:4a:e1:cd:6f:ec:28:30:66:a7:85:d5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:53:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=71602627679a4980b70d8ade578f14192fafeb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:95:f7:67:b6:9c:e3:fa:60:67:f9:f9:56:
                    34:96:f6:ad:7d:dc:78:24:b6:2f:66:9b:96:48:2a:
                    10:8f:1a:a3:b4:d2:01:c2:98:d0:67:46:3f:ca:43:
                    64:0b:b5:23:b4:75:8e:4d:ab:0e:d5:c4:50:c5:47:
                    a3:18:1c:b7:5e:09:8b:65:f3:24:60:0b:cf:b7:9e:
                    3e:03:93:8a:6a:89:c7:ba:94:24:1d:b1:14:f9:73:
                    a2:78:f6:28:72:04:ea:ac:cc:be:20:51:5b:fe:a9:
                    96:a6:ad:81:dd:71:0a:e3:1a:5e:37:fb:a2:4f:1a:
                    52:33:e6:47:19:0a:ef:e0:f4:f8:fa:54:6c:9c:57:
                    e7:47:6e:7e:f2:56:50:f1:07:4b:fd:ef:83:21:9c:
                    70:56:f3:d9:fd:d6:35:b9:66:44:eb:cd:42:1d:24:
                    a8:9c:dd:28:4e:6f:d7:d8:10:59:30:79:ee:71:97:
                    82:ba:10:f4:f4:9a:c1:2d:8d:41:85:10:f8:28:f9:
                    43:e0:e2:19:10:35:18:d6:7e:37:36:ce:b6:8a:21:
                    ed:73:04:b4:20:84:90:f1:32:ca:50:cf:16:a2:7a:
                    ca:28:25:e5:75:d5:69:79:57:76:c7:a8:1f:0e:72:
                    b8:32:a0:24:8d:2c:50:f6:40:25:ab:5e:31:d0:fb:
                    e8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.108.0/22
                IPv6:
                  2a07:76c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209593

    Signature Algorithm: sha256WithRSAEncryption
         3f:a3:3b:d7:3a:e9:a0:26:1e:70:54:d8:85:64:d2:75:ee:e4:
         09:2b:92:1e:a8:2b:8b:2f:16:0e:cf:d1:5d:c3:c4:8c:72:93:
         fa:d7:3c:e1:6f:9a:ae:d0:b1:17:e9:3b:ee:3d:ad:02:69:c7:
         24:33:f5:0e:5b:0a:0e:4b:01:97:ac:18:1f:4d:30:22:27:b5:
         bc:bf:d2:3c:03:94:7e:25:91:f4:85:37:e0:78:26:ef:9a:b8:
         c1:4b:ba:39:87:ac:68:61:61:a0:f3:d9:ec:77:07:09:cf:2e:
         a8:65:0b:1d:cc:ab:2d:c4:90:9d:9d:da:76:1d:eb:3b:6c:a3:
         22:b2:f0:51:54:07:09:fe:64:7a:94:cf:72:f1:ca:34:bb:6f:
         74:c4:c8:ab:08:22:70:2c:54:73:a3:ac:3c:fb:af:f3:8c:3e:
         02:3c:0c:2e:76:09:95:04:4f:dd:af:3a:56:fa:ca:0a:aa:0f:
         a0:c7:15:11:85:86:a0:a6:5f:1a:8f:05:ee:c0:aa:0c:57:27:
         fe:cf:46:4b:be:50:e0:2c:d3:85:e3:0a:d3:bb:91:fd:4a:f6:
         cc:27:0b:db:2d:d1:cd:f7:02:ab:45:fd:45:46:e7:70:61:af:
         33:e6:7a:74:ba:09:c5:9a:9e:16:cf:27:61:eb:3e:d6:5e:05:
         81:b7:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----