Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
File:                     gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer (raw, json)
Hash identifier:          SKBOAvrJQrOTEXviBC7oU4T4q2zQN4M1k+Q4y2Ag+Fc=
Subject key identifier:   81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019527E4FF95D409AAFF2A3295BA7AD8F831
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 21 Feb 2025 09:44:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212950
                          IP: 45.12.96.0/22
                          IP: 2a0e:a500::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:27:e4:ff:95:d4:09:aa:ff:2a:32:95:ba:7a:d8:f8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 21 09:44:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:5d:c8:f0:8f:9f:6e:42:6f:c4:b7:ee:9c:
                    5f:8b:10:ad:b5:4c:08:79:03:44:e7:5e:68:70:c1:
                    ce:22:b0:09:ff:18:71:c9:77:81:ac:08:63:0b:10:
                    6c:2c:d1:37:74:d3:75:9c:15:b4:da:bb:6b:73:7a:
                    1d:db:0f:ba:62:54:3e:b9:5f:30:68:ad:e5:77:32:
                    c6:7f:49:ee:4b:24:58:2d:a0:23:b0:4c:2b:8f:bb:
                    d7:d6:bf:65:5c:d4:cf:8f:02:a7:93:81:ff:37:0d:
                    9a:f3:04:b6:b3:18:51:5c:fb:5c:55:96:9c:c2:e7:
                    b5:0c:24:8e:c7:ec:8e:9c:41:72:fe:6c:dd:1b:56:
                    6e:04:63:5b:60:28:0c:17:c7:0d:05:e8:99:9c:0e:
                    c2:29:61:4d:28:16:3a:19:61:9f:7f:7e:d1:b1:00:
                    77:eb:21:e4:69:d9:1c:65:8f:cc:1e:26:7d:35:01:
                    ac:b3:1d:36:0b:a1:b1:8c:7d:29:33:51:81:a3:21:
                    11:2f:4b:63:81:eb:43:8f:36:24:9c:03:28:8f:6d:
                    ef:49:13:ce:33:c0:dc:eb:5f:8e:12:a8:24:cd:56:
                    2b:ff:2a:9a:32:68:b4:0a:0b:08:20:a4:c9:36:18:
                    ec:e4:03:52:b7:fb:b8:5a:92:75:fb:72:87:e5:5a:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.96.0/22
                IPv6:
                  2a0e:a500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212950

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:00:df:3a:24:3d:db:2d:91:f4:87:27:a0:27:53:ed:d9:
         bf:e9:e7:5d:38:64:54:58:0a:db:3b:0a:83:c1:9a:e8:91:d9:
         73:4a:c2:f7:cd:91:9a:1a:d7:cd:67:9a:70:ba:3f:ed:98:b2:
         00:9f:89:fa:e6:67:b8:2f:70:a4:c5:68:69:bc:77:d2:37:51:
         87:74:38:33:f7:7e:3c:25:c2:52:ef:71:9c:c0:5d:00:3a:ea:
         83:f0:6f:ba:0b:02:41:23:44:0e:dc:1b:30:f9:d8:b4:bc:03:
         40:8b:03:95:5b:c4:67:9e:84:df:e3:a7:d4:71:58:27:5a:34:
         0d:bb:79:89:b6:9b:c4:61:9e:b8:83:f9:d3:ba:46:87:98:22:
         0f:92:2c:b8:e0:3d:73:9e:93:e9:aa:e9:0b:7f:82:c1:49:65:
         5d:14:28:12:9f:59:73:22:c4:c9:ad:78:8a:89:d5:35:84:dc:
         f4:36:80:c2:e4:e5:c4:5a:ed:50:2b:53:56:ff:2d:85:75:c9:
         40:d6:e4:22:d4:30:71:23:6e:4c:b0:66:0f:14:58:d0:85:38:
         6f:f1:c5:16:3a:c0:5f:b8:c5:12:c2:97:17:bf:1d:93:98:f3:
         89:95:07:0e:ca:4b:cf:6b:12:17:91:74:36:f0:08:c5:e0:b9:
         21:5e:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----