Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
File:                     d6U9LpdwTb6oMaZEAHKQTukacbA.cer (raw, json)
Hash identifier:          uiHSIIrbxcbvuRiqLjTjEZI5E+eMPfd1BMIerLsDX7Y=
Subject key identifier:   77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA4C0B233EB9C58009D39BEA7E0102
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42510
                          IP: 176.103.64.0/21
                          IP: 193.200.68.0/23
                          IP: 2001:67c:1524::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:4c:0b:23:3e:b9:c5:80:09:d3:9b:ea:7e:01:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=77a53d2e97704dbea831a6440072904ee91a71b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:74:70:f8:22:86:40:70:91:25:9f:3a:fe:
                    d6:ff:23:bf:21:ec:ea:04:37:3a:28:76:dd:02:74:
                    8a:be:a7:8b:b0:fe:8c:cf:52:98:0f:13:ec:f2:80:
                    b7:68:ff:8d:e6:d0:15:f4:08:fd:aa:31:92:bb:79:
                    a5:52:44:0c:65:8f:26:a4:8a:9c:99:a0:09:f2:f4:
                    b3:fb:46:82:6f:06:0b:f1:f1:2e:8d:0a:86:ca:47:
                    0c:a0:03:66:a2:be:29:6e:e3:6b:c9:56:30:e0:76:
                    8d:1b:7a:c8:85:0e:70:c7:51:61:9b:b4:48:73:12:
                    10:bc:9a:47:f9:3c:31:9d:45:c9:2d:dc:1a:b2:94:
                    04:09:19:da:00:91:2a:af:f5:0e:98:e1:a4:16:5a:
                    da:ee:9b:52:49:e2:d5:d4:a6:a3:cf:d0:1d:4f:0f:
                    57:32:16:71:52:ea:54:03:5c:fe:17:33:e1:98:cc:
                    a0:d4:b2:d3:6b:eb:ff:60:74:8c:df:43:9a:be:17:
                    e1:1a:fc:79:47:20:05:bc:d8:ed:c8:23:97:74:12:
                    59:13:92:e0:a7:e3:27:a4:cd:b2:ff:40:a4:90:cd:
                    a8:0e:9a:81:ed:e2:fa:70:da:79:12:4e:fe:c7:e6:
                    68:64:1f:01:da:37:03:91:b1:4b:6c:1c:21:60:44:
                    31:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.64.0/21
                  193.200.68.0/23
                IPv6:
                  2001:67c:1524::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42510

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:84:f3:fa:5c:bc:f7:c1:7c:06:0a:ba:60:65:6a:22:7e:
         da:b5:af:69:0a:ee:d0:5a:43:0b:4f:9c:e2:50:89:28:c0:ea:
         9e:86:32:e1:b2:df:9e:6c:97:f4:f5:6d:e0:cf:04:98:08:69:
         86:d1:e0:27:d9:09:38:83:e3:bb:29:6b:92:4b:17:4a:a2:f7:
         7c:20:85:2b:33:46:05:08:e5:a6:d8:cf:a6:1a:72:b6:40:e2:
         e5:d9:88:59:66:f4:51:c7:1d:56:69:b6:7c:95:63:00:48:17:
         dc:19:db:30:b4:5f:76:4a:43:e4:0b:bb:33:e9:a6:41:91:00:
         a0:5b:dc:cb:35:64:cf:ab:e3:58:61:24:94:6e:27:9c:19:4c:
         de:54:0d:eb:be:10:62:54:fd:0a:9b:83:91:f5:08:19:b5:22:
         6b:35:c8:1a:cd:a2:0a:51:ba:48:a7:76:99:f7:00:b6:20:01:
         94:6a:dc:8f:fd:e0:2b:0c:46:03:d0:f0:31:c8:b5:90:83:6f:
         7c:30:ee:d0:ba:0d:d6:0a:ee:36:67:63:56:0a:12:2b:b1:8c:
         3a:22:f4:40:aa:ba:08:1f:47:69:3e:1f:e8:14:97:78:d9:58:
         93:2d:55:f4:9c:38:97:32:87:9f:a5:6b:35:de:b2:2f:b8:b2:
         68:9f:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----