Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
File:                     d53x3kOsymHuwDTOomi0ZUzBXKw.cer (raw, json)
Hash identifier:          q8/buNeoU/RCGz+EI0H7kKyBlvtRurDEgSQBjyKKY3M=
Subject key identifier:   77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3C7B84933F5A56BAAE8BAF038B751
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57067
                          IP: 176.62.144.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c7:b8:49:33:f5:a5:6b:aa:e8:ba:f0:38:b7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=779df1de43acca61eec034cea268b4654cc15cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:60:fa:6a:13:99:c0:1e:62:c0:27:2e:f3:
                    3a:f0:4b:c1:77:75:c1:a2:f3:e9:a0:9a:17:63:db:
                    bf:04:ad:99:e9:a9:7c:fe:6e:d8:e4:2d:ca:ae:f4:
                    f2:b8:0a:3f:ed:fb:bc:3a:c0:1e:eb:14:5d:ca:b6:
                    3e:88:a6:a0:7d:15:2d:06:79:7b:51:b9:f4:65:f7:
                    1a:9a:03:82:4f:a2:db:d2:b4:df:67:0e:bb:14:cf:
                    54:08:23:0a:8d:04:2e:7b:bf:94:a4:27:5d:15:73:
                    e5:42:c4:78:ec:3c:c3:f6:b9:a6:8b:4a:36:af:d8:
                    95:b9:a2:c5:57:7e:d2:eb:18:18:3c:fa:7d:5b:bf:
                    eb:e3:a9:be:66:e5:c6:bd:05:4c:bc:c0:73:ba:87:
                    88:59:d2:24:14:95:90:8c:a6:0b:18:83:20:a3:87:
                    24:aa:29:38:a8:3e:ec:e0:d8:6d:7f:b3:c2:e5:e0:
                    6b:05:ba:9b:6e:ab:f2:74:be:1a:99:2c:69:e0:ea:
                    e4:95:d6:73:6c:b3:ef:b1:25:3d:9d:9f:5e:ff:97:
                    c6:05:4d:0c:b0:74:a7:e9:f1:b6:18:0c:04:9e:2f:
                    7a:0d:92:a4:f3:e4:69:97:fd:e0:4b:64:e4:1c:df:
                    ad:34:cf:ce:47:36:75:1b:18:34:97:99:7f:6d:b8:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.62.144.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57067

    Signature Algorithm: sha256WithRSAEncryption
         0e:bc:f2:80:21:7a:59:61:9d:73:a7:58:d6:24:7a:b4:13:67:
         3b:7d:a0:af:0c:85:bb:75:e7:90:93:53:f9:45:d6:a9:61:49:
         3a:c2:e7:8a:6d:d4:ce:a2:9c:5b:57:d9:0a:cd:c9:a4:de:91:
         34:99:52:7c:ed:ca:41:fc:e4:8b:f6:9c:40:98:94:b0:ca:37:
         8d:e6:87:76:cb:fb:f4:3e:e6:a0:1a:e2:d3:50:75:a6:30:cc:
         4f:6f:7d:05:a6:52:b7:ea:34:19:20:ed:ee:49:26:f4:fa:3b:
         4f:b6:db:2d:5d:5f:ae:c8:74:a4:5d:46:a8:a0:dd:bf:fe:48:
         44:21:14:7d:b2:5d:77:37:0a:f1:ea:58:32:a2:92:cd:d9:b4:
         b7:70:65:9a:29:c4:27:05:4c:2e:ad:10:59:c1:62:57:80:3d:
         af:9a:a2:ff:a5:94:70:62:22:fe:1a:29:48:e4:d8:1e:0b:90:
         15:2a:58:95:c6:6e:eb:fb:bd:b1:19:38:35:31:21:e1:be:a1:
         9b:87:eb:04:a0:6e:df:af:66:6f:df:ca:cf:52:60:bc:c4:2c:
         f4:fa:cd:66:d0:c9:62:f5:a5:1c:b1:23:87:d8:2c:6b:94:e1:
         fc:0c:72:23:de:27:cc:2a:ba:14:28:68:67:f6:e6:7d:11:e9:
         52:fd:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----