Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
File:                     ngoRprHRiWV8f7luwUWLr8oYZPQ.cer (raw, json)
Hash identifier:          GesOjWNT8+x8fCtXrvUc4kZ6vmd5x59DEi+Cj1dPJb4=
Subject key identifier:   9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5A9601BD7837398D566EB49E9D922
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211992
                          IP: 2001:67c:aec::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:a9:60:1b:d7:83:73:98:d5:66:eb:49:e9:d9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:bf:e4:74:90:6d:0e:d0:ea:8c:25:be:f7:
                    8d:a5:5e:7e:8d:24:a9:d4:be:26:dd:a3:f0:4f:42:
                    92:99:b1:5e:d1:59:73:e0:bb:a7:f6:93:82:dd:b4:
                    7a:ab:c7:16:e0:cd:be:10:14:5c:48:32:de:cc:2d:
                    d1:5f:af:e4:4a:ab:9f:2e:12:2e:d0:0e:45:cd:10:
                    d1:fd:59:c7:42:90:95:9c:03:81:8a:23:5d:ba:b3:
                    22:4a:4e:46:f7:fe:ae:da:3e:02:26:ad:7e:52:30:
                    0c:87:dd:af:db:9b:a3:36:e5:0b:ff:56:ac:29:34:
                    cc:d0:58:65:f7:25:16:d0:a2:6f:d7:36:1b:f8:9f:
                    8d:d5:c4:41:d4:1c:3c:e4:75:3e:5c:5f:82:15:9e:
                    5a:76:57:d6:82:df:45:b3:39:b0:a6:51:a4:d3:87:
                    1d:51:14:f7:b8:4c:09:a1:0d:df:68:19:1f:d0:44:
                    ff:ea:8d:73:51:4c:94:ef:a7:47:6f:57:b7:e9:94:
                    9d:f2:7d:34:51:6c:71:64:5c:36:a1:db:c1:5e:f9:
                    c4:f2:3d:14:33:85:f5:45:96:b4:f5:77:5c:95:af:
                    a4:72:7c:50:d5:e1:c7:e8:ac:3e:8a:d2:84:9f:06:
                    4c:09:3c:74:97:80:56:22:f4:ee:d7:7f:e6:4e:c6:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:aec::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211992

    Signature Algorithm: sha256WithRSAEncryption
         59:e9:25:88:84:7c:9c:92:76:82:3f:93:83:c7:4d:ec:dd:5c:
         01:e7:2f:40:ab:b4:8c:25:41:9b:b7:ad:f4:1f:7f:a2:c3:97:
         67:1e:74:cc:10:d6:84:ee:4d:b9:46:6c:43:aa:7f:a7:75:e1:
         28:60:83:04:51:1f:63:88:41:8f:a4:1e:51:72:64:42:cf:06:
         ec:2d:4f:67:fe:12:10:ff:72:1c:1a:05:8e:11:d9:bb:dd:77:
         85:08:4b:5e:0d:4a:6a:26:ad:39:c6:87:85:45:50:66:56:f2:
         3d:05:26:11:04:98:e7:6e:63:57:56:41:fc:0b:d4:4b:c6:24:
         16:e9:39:17:94:59:68:8c:db:e1:db:5f:9b:b0:db:59:32:27:
         ab:88:8f:55:9f:9e:bf:f7:03:1e:fa:b1:e4:36:70:fb:84:d8:
         98:fd:65:d4:c8:44:07:dd:de:9b:a6:6e:45:62:8a:49:1a:36:
         09:de:4c:34:44:f1:84:2c:e1:0f:4d:df:46:5f:56:ab:17:0c:
         4a:81:dc:76:1d:24:d3:69:27:d5:18:c3:33:99:93:04:d8:88:
         17:3e:af:73:22:71:8f:5a:83:b5:51:2c:ed:fd:13:6d:f9:0f:
         ff:42:4d:10:8b:b0:b3:dc:df:47:1c:5e:ca:c3:58:9f:5b:66:
         79:7a:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----