Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
File:                     pS_GDTbii7jfFFyErKsZz6U7Alo.cer (raw, json)
Hash identifier:          +SbI/Q4hTUv6qrkqC5pu489Q0zJf8Aseg5o47TlXVeg=
Subject key identifier:   A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C099671BCD69DE770D96FF7137DB5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 1921
                          AS: 207021
                          IP: 176.97.158.0/24
                          IP: 192.174.68.0/24
                          IP: 2001:67c:10b8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:09:96:71:bc:d6:9d:e7:70:d9:6f:f7:13:7d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:fa:a9:41:78:58:07:12:fc:18:ba:7a:3d:
                    e0:f4:88:d2:39:93:d7:89:a6:67:b9:e6:b8:e7:b4:
                    ba:72:e2:ef:75:f0:d6:57:79:98:ea:a6:6e:21:a7:
                    ea:18:21:6a:2d:a3:6a:0e:15:51:4a:04:83:c0:21:
                    51:79:c0:16:03:25:12:3c:04:c3:ef:8c:d4:44:eb:
                    59:3b:a5:6b:ac:4f:5a:91:ad:d1:bf:f1:30:10:91:
                    33:2e:b9:f4:b2:94:1a:5f:b7:46:32:7c:57:ff:39:
                    cd:e0:22:4e:73:3f:ea:86:f9:69:24:1c:e3:3f:f4:
                    34:72:c1:cc:b4:b5:4e:fe:6b:ed:6e:cf:56:2d:44:
                    2e:e9:e0:27:6a:e0:a6:2c:a7:ce:d5:21:bc:ed:b6:
                    0c:cc:65:04:54:39:41:65:78:de:ef:c1:fa:31:23:
                    80:1f:8c:6b:da:1e:0f:88:6a:e7:e0:e6:70:3c:35:
                    63:99:f1:59:c7:c0:1a:38:ce:ed:96:48:ab:b4:8f:
                    dd:1f:d6:be:8b:42:4c:74:d7:07:bd:6d:40:ce:43:
                    cb:52:ea:b4:e4:e1:95:1d:a2:c6:1a:21:85:8e:8c:
                    36:50:14:4a:a8:1e:76:9e:af:8f:fa:e8:4f:3e:c6:
                    8b:eb:79:5d:ad:36:1a:d8:8f:1a:d2:7d:ce:2b:ea:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.158.0/24
                  192.174.68.0/24
                IPv6:
                  2001:67c:10b8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1921
                  207021

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:a2:89:53:78:bb:c8:54:00:de:3b:e8:d8:07:f8:26:a0:
         f6:82:dc:da:40:7e:71:76:f6:43:96:4d:ef:03:87:16:da:4f:
         c0:00:a7:ce:fd:53:15:62:38:db:be:88:d1:83:70:b5:e3:15:
         0d:d9:7a:5d:4b:2c:10:8b:f8:b7:37:8b:75:78:05:bc:46:83:
         09:fb:47:6c:8b:e2:97:15:97:ca:19:0e:a4:32:50:01:98:a1:
         8f:01:1f:f0:e5:fe:16:81:e4:10:83:88:96:07:7f:03:5b:f5:
         b6:25:95:e6:83:87:4e:fb:62:fb:b7:e5:d3:3d:33:c0:2e:d4:
         07:43:b5:fb:2d:62:23:9d:e5:af:a4:bf:cc:56:07:7f:a1:d8:
         8f:48:42:36:ae:d9:c6:0a:73:ab:77:1f:47:84:6d:82:d0:de:
         6c:8a:fb:52:39:f1:52:ac:2e:3e:51:b7:ca:59:96:37:3f:be:
         c4:34:6a:80:06:8e:8c:e3:15:3a:7f:1d:98:05:c2:65:4a:bf:
         9b:2d:ce:37:7f:8a:aa:15:bf:14:b5:99:e0:78:4a:16:50:57:
         d4:ed:9d:c3:9f:5a:36:e3:68:69:c1:42:b6:d8:4c:85:78:69:
         ca:fa:c0:4c:ad:e4:f4:60:f0:7a:92:ca:5d:be:1c:0b:92:41:
         8d:e8:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----