Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
File:                     l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer (raw, json)
Hash identifier:          gzNl+Tgnq+JE/HM7Ilf73abRSsfzlqbXxbUdimPZT2Q=
Subject key identifier:   97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C2F93FDEDBFED46E9EFB127954449
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50815
                          IP: 178.216.56.0/21
                          IP: 194.0.174.0/23
                          IP: 2001:67c:2300::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:2f:93:fd:ed:bf:ed:46:e9:ef:b1:27:95:44:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:ef:8e:78:fc:4a:d2:8e:21:c9:2c:0a:c1:
                    fc:0a:79:e7:c0:55:b7:e6:8f:69:6b:e0:c4:bc:42:
                    b2:7a:c5:30:71:cb:f8:f1:ce:f8:6a:e9:61:61:a4:
                    ca:29:ee:c4:96:1d:6c:6b:3e:0f:77:36:38:0e:6d:
                    d4:a5:e7:b3:66:98:29:f6:57:c4:44:6c:8d:d8:0d:
                    54:aa:3a:f9:41:29:09:66:46:10:04:a8:da:35:e9:
                    34:72:42:98:01:91:02:a1:44:c3:09:14:7c:9c:69:
                    75:78:f2:61:d9:b0:f8:cc:89:bd:e7:73:2a:65:9f:
                    39:64:e3:60:9b:91:ee:73:8d:bb:0c:cb:50:62:64:
                    c2:fc:88:ae:f7:c1:f0:c5:0b:00:c8:eb:c1:36:4f:
                    ec:b5:e1:98:1e:e4:3e:a5:8a:d6:1d:e4:c5:e9:77:
                    e0:25:0a:79:e6:d4:c6:14:87:a7:d4:ee:af:2b:20:
                    1d:1d:48:3f:b6:85:12:b0:7d:11:7f:b1:fe:15:89:
                    f2:ef:64:df:32:e8:fe:af:ca:a5:a4:95:af:b4:19:
                    70:d9:ce:46:7a:5c:d3:3b:d8:b8:b2:ea:e2:6b:5f:
                    2d:e3:aa:20:b4:21:5e:fe:ab:b2:12:f2:54:e4:cb:
                    36:60:75:55:9e:52:12:d5:6b:3c:cf:2d:dc:e0:f1:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.216.56.0/21
                  194.0.174.0/23
                IPv6:
                  2001:67c:2300::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50815

    Signature Algorithm: sha256WithRSAEncryption
         54:73:24:29:bc:93:b9:09:4e:b4:05:ae:78:5e:f3:c7:cf:bc:
         9e:26:59:b0:4a:d6:04:c0:9e:f8:ae:4f:c6:16:fd:b7:3e:ac:
         87:89:b3:95:bc:c2:fd:db:6e:af:f5:3a:f4:8f:40:2d:26:b3:
         62:3c:bf:f7:68:6b:f9:69:2d:9a:61:c6:6b:2a:26:ac:76:f1:
         93:cd:98:86:17:dc:94:56:ac:9d:e4:9d:41:97:89:c8:ce:d7:
         c6:64:40:ef:93:08:e0:35:7c:a0:f7:48:10:4d:22:c3:21:42:
         12:19:6d:9f:e9:6d:c6:56:bf:f1:e9:bb:b7:2f:5a:7c:47:57:
         9c:89:d0:8a:d1:a0:9a:ae:5a:78:59:8d:0b:ea:7f:b7:ed:62:
         2a:0b:d7:13:da:85:15:00:08:43:0c:b7:b1:7e:0d:26:d4:48:
         3e:49:01:76:b5:d0:fc:d6:08:fa:73:ae:ba:41:14:f3:29:02:
         b7:7a:bd:2d:f8:b7:3c:94:73:90:86:a5:90:12:b6:64:0e:c2:
         10:6d:df:98:85:8b:91:97:28:f3:1c:2e:e1:a3:af:02:4a:6e:
         68:79:ba:75:6f:c7:de:fd:97:e1:b7:21:37:ff:d8:f3:c5:6b:
         f5:71:3a:2a:3f:9a:1d:67:1f:63:89:b0:d1:21:8d:1e:00:90:
         d0:20:db:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----