Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
File:                     kF3q_qO62SSCF7FinkLP_H5JG9k.cer (raw, json)
Hash identifier:          lIHEaxp8bBSkaHa96/54hdQhcGPgNjpaI5VEuGwfSGc=
Subject key identifier:   90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214433FD237A9216769B5D1E2F2D3650
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208609
                          IP: 45.92.68.0/23
                          IP: 2a0e:1f40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:33:fd:23:7a:92:16:76:9b:5d:1e:2f:2d:36:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=905deafea3bad9248217b1629e42cffc7e491bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:bf:e3:23:18:bd:35:6d:51:90:f4:94:f7:
                    22:fc:f0:6d:98:95:71:63:fc:b3:4a:bb:b6:95:21:
                    e9:3a:b6:4e:ed:7e:73:77:ee:91:73:e9:4b:cf:c4:
                    63:a6:05:4d:30:ad:63:25:96:89:58:a7:4b:4f:ca:
                    50:71:0d:bc:3f:8d:a0:e8:c1:2d:31:7d:50:89:26:
                    a8:5c:c8:88:91:c3:c7:19:fa:bb:9a:e0:84:41:51:
                    08:50:3b:0e:f3:4e:0d:84:19:0f:32:35:28:d2:96:
                    09:8f:ac:73:62:fe:24:dc:47:d4:5a:9f:5a:b0:e2:
                    f2:ac:2b:7b:75:d7:ee:29:08:b8:cf:4a:c8:06:06:
                    5f:3a:6a:4c:15:fd:d1:c5:cd:39:33:f6:20:12:bc:
                    8e:07:b0:bc:41:c5:ac:90:8c:fc:54:34:e7:c4:4c:
                    fa:07:a2:c5:a4:ba:ab:41:13:9e:4d:08:07:97:50:
                    d5:ca:b6:f7:58:30:a7:71:87:2b:e7:1b:aa:ea:1d:
                    97:4a:4c:a9:2b:1b:49:02:4c:c8:aa:59:6f:85:72:
                    cb:a1:04:a0:ba:68:cb:07:b5:bf:b5:0f:c7:20:7c:
                    5e:14:4b:36:de:16:92:79:3d:37:72:6e:20:b1:ac:
                    67:ee:71:23:f2:ee:ec:fc:92:86:c2:a0:0a:61:ee:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.68.0/23
                IPv6:
                  2a0e:1f40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208609

    Signature Algorithm: sha256WithRSAEncryption
         9d:1b:64:43:b4:d8:80:6b:27:53:ff:e6:0c:74:f6:5c:45:56:
         08:70:f0:01:5f:9a:bc:90:52:ae:84:8f:ff:7a:a0:ad:55:61:
         1e:5d:38:37:dd:22:c5:28:9c:c1:1f:0c:b3:97:09:de:5c:74:
         c0:f5:00:5d:1b:c6:ba:4c:e7:12:93:c2:19:f7:12:3a:85:60:
         fc:5c:80:95:ac:be:44:e7:b2:df:23:1d:1d:73:40:da:29:d9:
         43:d7:21:78:3e:e0:88:1b:f2:b4:de:78:16:09:1b:70:bf:cf:
         cb:14:48:fb:60:fa:23:88:83:a0:f0:f2:8a:1a:59:49:3c:e0:
         58:46:b6:58:c1:2f:0c:33:5b:bf:8c:51:92:2f:f3:c9:eb:e6:
         bf:16:12:62:69:30:05:f4:88:d2:35:cf:be:9c:46:0c:ef:0d:
         ac:7f:e7:f0:86:b0:a2:4e:60:d4:bc:52:43:02:2e:99:2f:11:
         9b:2a:9e:b2:e5:a6:2e:87:cc:d6:23:76:a9:c2:5b:a0:6b:5c:
         f2:08:22:39:69:d1:1f:83:ad:13:cc:3c:fa:8f:4a:86:2d:7c:
         21:05:aa:d2:d1:21:9c:6f:37:0d:b1:a5:47:35:75:c5:68:a5:
         56:f1:4c:e8:8f:5b:96:ad:4c:63:13:6b:1d:d3:d1:e2:4a:41:
         f4:f5:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----