Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
File:                     e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer (raw, json)
Hash identifier:          zCldKg3yztzroF5jmPzqweXZ4+2NJc5tUoJg7uDaiy8=
Subject key identifier:   7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B68E468C00424799BE952D67F57955
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:51:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211219
                          IP: 194.31.253.0/24
                          IP: 2a05:8000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:8e:46:8c:00:42:47:99:be:95:2d:67:f5:79:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:51:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:fa:1f:dc:3d:52:88:a6:6c:8b:c6:ed:0f:
                    56:78:c8:85:af:0c:1e:f2:76:05:6c:74:13:ad:81:
                    78:a3:68:48:7f:8c:5c:ee:40:49:f3:b6:ba:e7:2a:
                    31:1a:39:fa:77:85:df:e5:91:e6:9e:75:6c:d8:e3:
                    38:45:aa:bc:2a:cb:b8:64:29:58:4a:37:93:1b:5c:
                    89:95:4c:9d:a7:11:b9:89:67:f3:b8:ef:b5:5c:9f:
                    ee:d2:77:a4:29:63:25:33:4f:bf:d7:e1:e8:ec:a2:
                    4a:ad:b6:b8:76:f6:e0:9c:68:b1:4b:1d:64:c8:ce:
                    53:99:3d:43:1d:47:e1:9e:85:f7:d3:2f:a1:d1:40:
                    b8:44:44:51:1c:bb:2e:f8:73:f5:51:a2:62:28:54:
                    57:f5:51:26:8f:e5:fa:a5:46:c6:92:a9:48:1e:27:
                    1c:11:b7:02:7a:4b:6e:ee:a9:7b:29:e8:a2:f6:47:
                    b8:7e:0b:5d:6c:36:12:f1:09:25:c8:d4:ef:3b:67:
                    95:02:ae:86:ae:4f:44:fd:74:7b:d4:08:64:76:2b:
                    44:cd:fe:3f:8c:ad:02:e9:2b:48:d5:7b:e8:70:d6:
                    63:db:38:a6:1d:72:5d:68:fa:71:37:5a:35:11:16:
                    ab:f4:26:0f:10:9c:f4:e6:7c:5a:09:a9:ea:4e:ee:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.253.0/24
                IPv6:
                  2a05:8000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211219

    Signature Algorithm: sha256WithRSAEncryption
         7e:93:3d:39:dd:3c:e7:99:c8:d2:7e:d6:c7:10:0d:83:58:ac:
         3b:27:ce:18:32:14:ce:c4:c5:49:b0:b2:8d:12:ad:ed:31:07:
         ee:4b:98:12:8b:62:cc:0f:72:76:e5:ca:0e:21:c0:38:cd:b3:
         c3:b8:78:e3:0b:1e:47:9d:b2:98:75:4b:55:d4:dc:84:82:c8:
         c2:19:9a:15:19:41:ce:83:9b:45:58:98:41:10:51:ab:a9:63:
         33:7f:7d:f9:a6:ed:f3:1f:68:ed:fb:57:36:c1:3f:0b:bb:4b:
         5c:2c:2e:6a:cf:b0:05:ee:63:3b:3e:b4:eb:54:76:76:5d:3c:
         13:43:29:57:22:89:c7:ea:99:ad:f0:a0:38:91:59:35:e6:14:
         7d:cf:1e:60:ff:d0:da:2e:1e:51:01:b5:02:7a:da:df:f0:8f:
         56:cc:97:79:f2:78:25:c5:c9:e4:bd:61:79:4a:51:ea:4d:cf:
         ef:b5:14:28:ed:86:9e:5b:44:c7:30:02:1f:68:8e:7b:6f:74:
         d0:f7:6c:b6:51:fa:24:bb:c5:ad:45:81:b2:75:92:42:b6:da:
         e0:e7:ba:77:9c:fe:82:c0:c8:e0:44:b6:79:2a:a0:eb:21:33:
         7b:ff:5a:9a:24:18:f3:f1:93:9d:32:af:d1:37:3c:8c:f3:e3:
         29:8d:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----