Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
File:                     k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer (raw, json)
Hash identifier:          PiXJyngAuv/uvIWPmy2kRtgd4zsaT1xfH8YDy2MydOg=
Subject key identifier:   93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD628952DE98BA1D474594991596B3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215193
                          IP: 2a09:a6c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:62:89:52:de:98:ba:1d:47:45:94:99:15:96:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=93501077db80d52b16d49f863a61ea41a124bc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:2b:b5:57:ed:59:51:ce:2f:23:d7:e8:54:
                    60:64:7c:43:e0:f7:93:2b:b9:04:7d:43:c6:23:24:
                    56:5f:fc:93:9d:18:fd:a0:5e:38:ab:19:2a:1c:1b:
                    52:70:e8:68:fc:bd:2d:f6:48:5c:0a:4e:9a:25:06:
                    2e:6f:c9:67:0a:0d:df:25:99:3e:b3:ce:04:8c:ca:
                    4d:00:df:3a:46:cb:da:20:14:ab:ec:9c:8a:92:62:
                    30:52:5e:fe:ce:76:49:65:20:13:28:d6:03:63:03:
                    e2:b7:95:79:96:55:c3:93:c9:48:d6:d7:95:05:66:
                    e8:7b:05:04:b8:85:bb:d6:2c:87:5f:2f:96:f8:45:
                    02:f8:c7:7f:b4:b8:ee:2f:1a:62:49:a1:af:1a:42:
                    38:a8:1e:69:ec:02:10:12:e1:42:53:5a:84:61:c4:
                    50:39:50:07:33:41:97:9a:bf:ea:50:18:9f:8f:9b:
                    89:8e:f5:3a:68:21:01:82:ba:a8:6e:c9:27:5e:4d:
                    dc:e2:6c:c3:29:f3:43:73:12:76:fb:8a:ee:65:84:
                    18:a7:cf:9f:a1:11:5b:59:3d:94:a0:7b:e2:56:aa:
                    fa:e1:03:66:92:06:77:eb:e5:4c:8d:36:a3:bb:1a:
                    06:b2:c5:86:f4:2e:1c:aa:ab:87:f0:ae:75:68:cb:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:a6c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215193

    Signature Algorithm: sha256WithRSAEncryption
         af:95:e7:3f:c7:14:6b:d8:f3:a1:0b:ef:73:1a:28:b3:f9:dc:
         04:57:c7:2b:70:3b:4d:21:1c:7c:88:65:f9:d1:4e:41:92:f6:
         00:14:f6:0b:07:09:dd:e8:e3:33:36:06:16:c8:35:a0:57:54:
         6a:7c:18:bd:2b:f5:e9:b4:b7:22:1e:22:f4:cb:6b:28:e6:4c:
         35:16:d9:80:20:26:60:19:26:7d:bb:3b:3d:04:59:c5:ec:7d:
         51:b8:96:32:bd:0d:14:d6:f4:1b:52:5e:24:70:e7:7d:10:a6:
         be:d9:a4:e0:dc:e7:23:a4:98:38:04:9e:4d:53:81:63:2b:f7:
         54:66:39:a8:23:a7:80:0e:a4:53:9e:c1:f9:06:24:64:02:a4:
         01:7a:f5:5c:c3:0a:0d:c4:e3:74:06:ee:f9:f6:91:be:e1:b8:
         06:bb:66:32:cc:94:a0:c1:39:60:73:cc:e3:4e:36:6d:be:08:
         47:38:e5:db:84:d1:9c:cc:3e:97:f0:30:ab:65:5d:f7:1e:30:
         9f:8e:3f:b5:74:64:86:9d:60:b1:07:c7:c9:04:b7:4a:13:69:
         08:1c:d0:95:1d:f2:68:e4:5d:bb:48:5d:f1:ad:e7:fe:22:a8:
         52:db:f6:fe:1f:5f:b8:9d:c7:ed:ba:ce:da:7d:e8:e5:91:c1:
         75:73:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----