Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
File:                     m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer (raw, json)
Hash identifier:          DCrdnytGq/WFbistqZ5wD+TB4wx+LCYbTUNHNKcl2Qg=
Subject key identifier:   9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421441D6DC004E0F188ECD4E6997FF30F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198501
                          IP: 2001:67c:112c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:1d:6d:c0:04:e0:f1:88:ec:d4:e6:99:7f:f3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:c0:71:49:d4:5b:7e:e5:61:f8:b2:1f:03:
                    42:83:96:e6:e5:53:bc:55:86:ba:3f:86:2e:1e:fd:
                    1e:3d:bd:ed:87:5c:9f:85:9e:cd:f9:74:95:83:7d:
                    fa:b4:b7:74:41:69:64:fc:e7:66:47:95:bf:3a:92:
                    a8:20:d1:4f:13:84:4c:c2:c5:e7:87:23:18:89:40:
                    eb:9f:7a:14:b5:28:9e:90:f4:4f:7a:1c:d6:04:ec:
                    55:a4:f0:b4:03:2c:f5:87:d4:b1:b5:e5:f1:68:e7:
                    87:7d:79:7b:b5:76:9d:f4:da:4a:c0:71:6d:95:e3:
                    2a:c0:b9:95:a3:19:6e:63:f1:47:31:a2:ba:86:3b:
                    45:0e:7f:15:97:b9:f9:cd:c3:3b:7b:bb:6f:55:86:
                    31:d7:01:0d:41:a4:40:c2:0d:3d:a8:6b:a2:77:e7:
                    91:53:2b:62:e7:c9:bf:48:a6:5d:a6:99:85:12:69:
                    2a:6d:69:b1:ed:54:ad:cd:92:73:f3:83:f6:2c:85:
                    fd:ba:62:c9:bf:f0:1f:58:74:e9:70:5b:05:6f:63:
                    75:e1:0d:42:26:ef:b1:1b:e4:ec:9d:8c:09:41:27:
                    1c:50:d6:62:02:3f:04:c5:29:4e:d6:e9:89:be:26:
                    da:9a:6d:88:bb:03:40:e1:0e:25:8c:a2:9c:a3:3f:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:112c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198501

    Signature Algorithm: sha256WithRSAEncryption
         3e:75:02:b8:b2:19:38:80:63:cc:12:0b:3a:4a:6b:17:3c:3e:
         35:87:58:8b:d7:7c:3d:eb:a5:5d:04:9f:1b:2c:4b:5b:78:fa:
         12:1f:f7:50:17:81:96:a1:14:3a:68:40:66:d6:fe:b9:ac:18:
         6d:31:a3:1c:6d:92:48:96:3a:fb:0d:eb:98:07:68:59:95:c9:
         db:e6:58:c0:32:bc:ff:97:2d:d1:94:fe:46:ef:82:f7:a7:ad:
         e5:86:32:58:21:83:e9:1a:53:38:a8:bd:1a:45:1d:fa:a2:29:
         1e:94:72:13:ab:96:40:fe:e6:1d:63:4f:e3:24:2a:d9:1e:cc:
         2a:57:62:d7:fb:ec:6b:9f:c0:a9:eb:f3:1a:12:84:a0:61:1b:
         22:ac:47:10:f8:bc:09:47:93:aa:b4:22:96:c1:07:5c:27:00:
         d4:f6:3c:e7:40:c8:46:9e:fd:59:3c:fa:14:47:db:9b:75:36:
         a4:db:4b:2e:05:50:27:d0:b3:b6:c7:96:74:80:d1:71:c7:53:
         11:24:75:3d:dd:f0:af:a0:f6:27:4f:f5:8c:f0:e2:49:dd:a8:
         a7:f4:75:c3:44:89:38:de:a3:e3:4d:af:c5:8c:4c:8e:ff:0e:
         8f:94:a9:f7:26:3e:a8:55:f5:34:e5:80:ce:12:24:f7:1b:e5:
         fd:41:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----