Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.cer (raw, json)
Hash identifier:          ZBPph1pkJWg6fGj8GobhhIPQQrlHQQ9rHJGtk+8mLg0=
Subject key identifier:   AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420683A5A98EA073EF17735945B756104
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48980
                          AS: 59458
                          IP: 5.149.96.0/20
                          IP: 185.155.156.0/22
                          IP: 2a12:2340::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:3a:5a:98:ea:07:3e:f1:77:35:94:5b:75:61:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:dd:b8:58:52:e4:e1:bd:e8:cc:75:7a:f3:
                    4d:c8:13:9d:e7:63:0e:71:9a:19:d0:d7:9c:ff:4b:
                    ff:c6:2b:51:12:32:ec:f5:31:70:ff:6d:01:e4:d7:
                    f2:7d:92:8d:ae:d0:6b:b4:6a:08:35:68:3a:b0:af:
                    e1:9e:67:17:a7:a3:c7:ef:ee:fc:f0:be:7f:1a:3c:
                    04:f8:ab:0a:0c:3e:03:8f:5a:5c:00:23:b4:64:7d:
                    a4:3e:02:94:85:9b:c9:67:1b:30:c9:1d:7a:f7:f1:
                    7d:38:ff:86:f4:5e:2a:8d:42:c3:ef:5c:1c:23:00:
                    1a:5a:a8:07:60:e6:bc:f8:97:38:61:53:17:be:33:
                    a2:42:c0:fe:23:e5:c0:30:a7:ef:64:24:a9:cf:b7:
                    4c:8f:59:e4:93:83:bb:0e:0b:6b:83:33:9c:b8:4c:
                    ed:9f:1a:94:f8:45:7d:3c:2c:98:a4:a0:2d:ed:d2:
                    6f:d7:e0:89:f8:5d:48:af:a1:b9:3d:0c:03:fa:0e:
                    53:0c:72:3a:36:1c:81:78:81:14:c6:d2:40:e7:44:
                    06:2a:75:c9:45:11:80:c1:69:90:07:f9:0c:93:bd:
                    58:bc:32:e0:0a:79:ef:cc:87:d6:4c:03:8f:e0:75:
                    de:ae:dc:4c:de:fe:a4:3f:da:13:28:c0:4c:b0:28:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.149.96.0/20
                  185.155.156.0/22
                IPv6:
                  2a12:2340::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48980
                  59458

    Signature Algorithm: sha256WithRSAEncryption
         88:8e:b8:ad:cf:28:5c:b0:41:7f:35:48:d2:a9:45:68:64:d5:
         6c:dd:77:fc:62:24:44:e8:5d:23:f8:bd:cd:6c:ae:88:c4:aa:
         60:5f:6e:94:47:f2:68:e2:d3:03:7e:20:95:d9:5a:95:ad:14:
         45:58:6b:36:aa:63:4a:58:bd:7a:60:70:a8:5e:16:72:5c:c3:
         5c:5c:a5:1a:ef:e7:6b:ba:4f:cf:f4:24:39:97:cc:6c:32:98:
         e0:47:13:44:d3:11:d1:09:89:3a:bf:57:3a:41:70:4f:58:f1:
         7c:55:76:f2:c2:80:1d:31:0e:97:62:76:65:cf:4b:c0:74:9a:
         a7:ec:2d:dc:2b:c7:fe:b7:cf:18:38:48:2d:fc:d9:87:b9:29:
         dd:4a:6f:11:37:06:74:74:bd:88:de:fb:89:5f:73:76:20:ee:
         f0:af:88:44:10:ff:94:49:55:37:1e:b0:b1:c3:f8:b5:e7:07:
         1d:36:fb:0c:89:cd:8a:d0:c7:a4:25:2c:db:92:55:69:28:c4:
         a2:5d:28:3f:70:8b:2a:20:1a:f9:c2:70:fc:24:8a:6d:4e:36:
         ab:5a:3d:65:d8:2f:82:b2:57:88:8e:f2:56:d5:39:fa:78:1f:
         d2:2d:20:92:3e:25:2f:c4:03:23:d7:0c:d9:f6:29:34:68:03:
         d5:47:ae:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----