Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
File:                     scPsU58j7gMao5asXO1CVjiEt7M.cer (raw, json)
Hash identifier:          CwbI8VqLddtNaqvp45MIyjkAMxncKBZbfTGZc0dXkKY=
Subject key identifier:   B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D64EEBE4093AE7EAE0909CFEBF976F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207366
                          IP: 91.220.231.0/24
                          IP: 2a0a:ed80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:4e:eb:e4:09:3a:e7:ea:e0:90:9c:fe:bf:97:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:67:d1:4b:2c:f9:aa:02:56:95:e5:b4:3d:
                    de:cf:33:d5:1c:d6:06:b0:a8:93:da:5b:e9:4e:a2:
                    1f:9c:29:74:c4:7b:61:8d:e3:a2:11:f6:65:1a:d5:
                    f4:35:4b:38:fb:48:9b:ca:ab:91:6d:5b:79:57:05:
                    53:39:49:be:4d:5e:ef:3b:8c:c3:a5:42:46:3b:7d:
                    c1:1b:e7:c5:80:f1:5a:64:ed:7e:b4:13:0f:93:92:
                    86:81:fd:66:32:f4:9c:ff:9e:0c:3d:98:8a:a7:eb:
                    b6:72:dc:29:f9:c2:da:77:19:d9:d5:e9:15:51:1c:
                    fa:c7:cd:b0:7f:7a:f6:d1:b6:cb:14:f7:6b:db:53:
                    f5:71:85:3e:30:bc:2a:b2:a6:e5:9e:c2:c8:15:44:
                    5f:b0:46:c5:03:49:91:b0:b4:c8:c4:ed:cf:6a:42:
                    33:67:88:49:11:14:48:78:e6:59:c6:a2:36:86:d4:
                    ea:4c:80:c2:1e:4a:d1:20:32:54:35:34:9b:c5:a3:
                    ed:25:db:82:e7:e3:dc:db:27:b0:d4:c9:78:bd:8a:
                    d6:16:27:25:2d:46:25:1f:42:e7:07:a1:f3:ef:d1:
                    16:bc:69:ec:4b:89:20:f8:29:00:47:c4:74:41:10:
                    23:5f:55:ca:3c:e2:4a:fe:75:ae:0b:a9:4f:38:b2:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.220.231.0/24
                IPv6:
                  2a0a:ed80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207366

    Signature Algorithm: sha256WithRSAEncryption
         85:18:c1:1e:8c:c3:b3:0f:76:c5:17:57:85:f8:3d:12:aa:a3:
         50:c4:01:df:be:07:0a:92:67:2c:15:18:c0:a6:b5:63:5c:ab:
         ac:a8:ea:86:67:91:58:fb:be:4d:31:88:6d:ff:0d:06:ea:5f:
         47:4d:81:00:c6:68:24:06:72:c5:38:c6:7f:86:25:1c:e1:d7:
         e8:15:35:ee:44:11:af:69:2b:79:f7:9d:8a:3c:db:74:59:7e:
         38:c1:f9:2c:8e:4c:78:39:19:9e:15:2e:83:fc:f2:7a:c7:8b:
         1e:34:e8:21:1f:ce:fb:58:85:d4:8e:92:4c:ed:90:20:20:86:
         5d:b8:dd:8e:d6:90:34:ec:91:85:b3:2d:ef:50:31:eb:07:10:
         60:d1:63:fd:fb:60:89:85:cf:4e:a1:c6:60:86:28:82:47:f5:
         71:8a:81:7a:4a:02:6c:e1:44:ba:4e:de:b0:07:c7:dc:bf:df:
         bf:9e:6c:57:0e:73:5a:e8:c5:a0:3f:ec:31:a8:db:a9:e4:91:
         c7:74:bb:c2:41:55:6b:91:57:92:76:45:be:c9:44:05:27:d7:
         19:5d:e9:d9:25:58:5e:0c:96:c2:04:2c:01:bf:10:3e:ca:08:
         02:5b:76:25:c0:35:4d:18:f7:bf:06:fd:bd:67:61:f9:ba:69:
         13:e5:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----