Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
File:                     dmAUOBTDTSksdavNtF-BgZU07cE.cer (raw, json)
Hash identifier:          bo0iwfHjd4oTEQQABpnBM3vFzvS5tWJgHgtOER7zEKw=
Subject key identifier:   76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423691A3D2815B7D0CC5BD11BE1A431CF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 29478
                          IP: 2001:67c:14c8::/47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:1a:3d:28:15:b7:d0:cc:5b:d1:1b:e1:a4:31:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7660143814c34d292c75abcdb45f81819534edc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:7c:6b:1a:b0:b3:03:fe:2a:5f:54:28:a4:
                    8b:b0:fb:f2:82:c7:2e:91:3a:83:dc:93:98:41:42:
                    2e:38:b6:46:9b:75:76:38:c1:cc:6d:57:4b:cb:25:
                    43:7c:75:29:da:60:85:7c:93:6f:01:61:a9:a3:78:
                    a5:87:3e:30:29:a3:ea:03:bd:8b:25:29:dd:a8:e1:
                    08:a2:74:55:a4:af:90:28:62:b2:2e:e5:52:20:97:
                    7e:a2:5b:8e:e3:ab:85:e4:09:59:60:29:f1:69:2a:
                    34:75:03:8d:14:69:81:54:ec:2b:c4:24:87:06:e2:
                    35:1a:6e:6b:25:57:81:c4:57:a5:cf:17:b7:41:a9:
                    70:4e:72:5d:af:9f:34:77:2f:b1:e5:7d:35:ca:df:
                    29:0d:2b:19:83:73:19:1a:be:62:e3:ff:c3:6e:51:
                    ac:eb:26:81:9b:f3:a9:9a:9e:55:e8:e7:49:4b:1c:
                    cc:cc:62:e8:f5:dd:0d:3f:86:90:6f:a4:04:98:a2:
                    1e:42:56:9f:85:60:67:91:16:f1:fb:7a:ae:a6:87:
                    1a:f4:f4:fb:d0:f3:1f:13:b4:36:01:97:b0:a7:cb:
                    c5:d4:e3:00:e4:b0:27:e2:f3:55:94:ce:2b:5c:08:
                    26:ef:40:6d:a2:bd:69:2e:52:f4:55:ae:69:23:55:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:14c8::/47

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29478

    Signature Algorithm: sha256WithRSAEncryption
         a7:94:c6:81:7b:a9:96:f2:08:8f:2e:da:d0:2f:23:89:85:f5:
         84:88:74:3f:c2:81:aa:f8:e7:f1:19:67:f8:02:29:95:5a:06:
         e5:9d:e7:57:65:ce:cd:f2:df:bd:59:d4:9c:eb:71:5d:c0:f9:
         32:45:7a:9b:02:32:ff:97:e0:12:f7:fa:8c:d0:6f:e0:d0:bd:
         c4:4d:cf:ec:18:61:25:99:74:40:39:84:c3:16:54:7c:ea:24:
         96:1c:f6:68:84:1e:f1:b5:9b:1f:19:69:2a:bd:af:e0:b3:c4:
         bf:e4:c0:50:cd:eb:d9:a0:c2:88:81:78:ea:72:2a:43:52:12:
         90:93:8b:5f:28:05:e1:ad:31:11:d0:e4:f0:5a:f8:fb:d3:fb:
         3e:83:a9:8f:bc:d6:4d:13:8d:da:4c:79:24:d2:9e:45:ec:05:
         4f:ae:94:bb:7b:9d:ec:6c:7b:be:31:11:30:d6:e1:69:c5:06:
         9d:83:c6:4b:2a:e7:01:11:f0:af:e5:80:95:0c:a9:7d:31:1e:
         a0:ad:d3:05:0b:59:b3:10:65:48:4e:9d:f6:b8:e1:e3:1f:3d:
         e3:d5:48:e1:14:1d:e2:08:71:9f:22:1e:43:91:b2:ba:7e:4f:
         9e:20:f3:cf:80:55:47:a6:59:31:e8:8e:97:73:67:39:70:d4:
         d2:da:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----