Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
File:                     kGSznoDKHN5MrcC8jqK0HqbSfHY.cer (raw, json)
Hash identifier:          FvGXI3wfW54jBVFkIm9HTrVRypyjY2fXdpX2Ic0gFAo=
Subject key identifier:   90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424447CC9DCBC1892BC5BB2CE36B2EC3E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 40985
                          IP: 195.189.216.0/23
                          IP: 2001:67c:2860::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:7c:c9:dc:bc:18:92:bc:5b:b2:ce:36:b2:ec:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b8:58:78:1d:d3:a3:42:0f:46:03:03:58:eb:
                    bd:37:97:65:62:a8:35:bd:a6:00:98:03:a1:b1:78:
                    78:5e:11:cb:d8:fe:71:ec:22:67:0f:71:14:4e:93:
                    2c:72:db:03:76:ac:6c:a3:4a:c8:20:09:9c:1f:34:
                    64:74:2f:e6:5f:9e:fc:d5:a1:45:6e:ee:1e:d3:75:
                    e8:90:f7:5c:fb:38:f8:55:f9:1d:14:7f:56:94:1c:
                    8e:45:0e:f0:09:59:16:de:5a:3e:09:b6:6a:17:d3:
                    03:cf:6e:5b:e5:4f:54:0f:4f:5c:ba:c6:f2:d4:b9:
                    d2:27:1f:0d:e2:6d:14:16:25:af:34:3f:69:be:42:
                    db:20:96:2b:c4:92:11:e5:5f:a2:95:f1:36:4d:84:
                    ed:b5:ba:82:fa:f7:04:a3:ae:f0:dd:e4:e4:51:83:
                    78:55:20:9f:3b:2d:5d:dc:c6:0e:1d:9f:d3:e8:db:
                    30:b9:8f:fc:01:b4:e1:8a:25:5c:92:93:db:ba:d7:
                    b7:4c:76:bf:a2:9f:74:84:db:b8:06:5d:65:4c:71:
                    55:9b:dd:bf:c4:65:f0:7c:53:c1:37:2d:92:9f:fa:
                    ea:3d:de:0a:9c:69:cd:22:44:df:3d:ba:6a:e6:1c:
                    f5:a1:68:8e:16:8a:82:f6:f1:c7:58:63:af:e2:c9:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.189.216.0/23
                IPv6:
                  2001:67c:2860::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40985

    Signature Algorithm: sha256WithRSAEncryption
         11:7c:8f:4c:97:10:6f:0f:c7:36:7b:7a:91:f4:60:81:d3:02:
         0a:f0:de:9e:66:e4:0e:dc:a7:20:f6:ce:1e:5f:04:0c:a0:48:
         b6:d2:84:fe:63:5a:30:c3:d1:2a:25:d9:c3:e7:83:36:10:d8:
         fb:b2:10:a8:2c:35:5b:e3:65:4e:b4:35:d4:61:83:bc:37:c7:
         8c:c7:b5:f8:5a:69:45:97:23:f9:f1:b1:eb:ef:c4:eb:e3:63:
         de:0c:1c:aa:83:f2:6e:d9:ae:2b:f5:9b:b1:8b:f9:62:49:46:
         e2:3b:4a:55:27:4b:47:3d:f9:5c:f9:6c:e8:96:61:af:2b:7c:
         bb:69:c8:50:df:59:36:e4:5e:fe:01:aa:d7:8f:6b:58:35:0e:
         1f:e6:a4:dc:25:ca:e3:51:e3:93:82:ee:75:65:6b:32:f5:46:
         36:9f:be:9d:e7:bd:ff:44:21:50:88:ac:a2:ea:c7:25:3d:47:
         49:bd:59:6b:bd:b7:0d:3c:81:7d:e3:2e:db:b0:14:70:c4:f2:
         19:09:d0:cd:fc:f5:83:c4:c6:d8:02:e2:98:b5:50:11:57:e4:
         cb:95:f4:27:75:02:be:c4:a8:ca:0c:ae:80:7c:bd:68:0c:6b:
         dd:a5:a9:6b:29:de:ec:cf:ea:58:f2:61:55:b6:5a:dd:e9:6e:
         11:3c:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----