Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
File:                     ssX3TfRSDTQdo0inAKA7l8rwdzU.cer (raw, json)
Hash identifier:          bKaZ/Ixh3Gsw0KUZMvOS1Yse5TCQVg/Xz87ib7iJ4xQ=
Subject key identifier:   B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6D00D2C2F9FB5F05C7805B50F8149
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 28727
                          AS: 47230
                          IP: 195.216.239.0/24
                          IP: 2001:67c:628::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:d0:0d:2c:2f:9f:b5:f0:5c:78:05:b5:0f:81:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b2c5f74df4520d341da348a700a03b97caf07735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:4d:ca:d7:51:53:6a:bb:ec:9d:48:67:84:
                    87:1f:48:2a:f4:99:28:c7:f2:1a:e1:3f:f1:73:c2:
                    cc:12:78:d4:2e:ec:37:c0:14:e6:f6:0b:1c:fc:80:
                    f1:0c:16:f1:74:3f:e2:40:c9:19:b8:76:54:a0:bd:
                    e7:00:4e:37:57:d4:12:d7:d6:1a:a6:a3:39:3c:26:
                    2b:52:f8:f7:0c:1d:52:60:e3:18:90:1d:f4:e0:74:
                    12:ed:a7:e2:38:89:10:75:00:76:da:3f:93:15:db:
                    cb:cf:32:a4:c7:c9:fb:15:f1:d9:62:08:0b:b4:08:
                    af:b0:4b:2a:b9:ec:27:10:af:47:64:bf:9b:21:f3:
                    75:08:56:f2:f7:02:ab:3a:d2:5a:71:56:34:1e:55:
                    41:6e:ab:21:a7:18:85:67:2b:96:c9:24:28:42:d7:
                    ae:68:ec:df:26:f1:5a:a8:2c:16:81:3d:87:05:7f:
                    cc:ab:f2:8e:1b:d8:5a:12:22:3a:e9:f9:e3:09:8c:
                    07:b0:91:14:37:fd:ad:ec:78:9e:47:6a:bc:2c:a4:
                    18:70:15:d0:69:84:5e:d8:cc:33:4e:88:0d:aa:40:
                    69:62:ea:ac:74:3d:e7:35:df:6d:be:96:13:09:61:
                    4d:f5:98:78:92:1a:0a:c8:00:fb:41:70:26:9b:f1:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.239.0/24
                IPv6:
                  2001:67c:628::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28727
                  47230

    Signature Algorithm: sha256WithRSAEncryption
         47:76:75:5a:34:96:07:0f:d8:76:ba:31:6b:74:04:b9:23:1f:
         77:48:fc:9b:71:e2:6a:f2:ce:ab:b7:d4:4f:0c:f7:1f:90:f8:
         6a:f1:8d:da:79:d3:75:7a:f9:27:7a:83:55:d0:38:dc:06:75:
         c8:96:33:82:0b:13:62:f9:8f:b6:22:f1:98:38:7b:f6:12:a8:
         42:08:46:b7:d7:2b:f2:62:b5:18:e4:74:94:ea:69:90:93:bc:
         91:91:f5:60:55:c3:66:03:9f:97:97:20:12:70:b1:57:9c:fc:
         40:c5:ab:a8:3f:61:6a:42:4b:8a:3c:4d:c6:07:f3:ec:dc:90:
         1d:1b:45:88:ab:0c:d3:89:80:57:81:8b:ce:a5:25:b4:99:79:
         2d:c3:a4:7f:1d:f2:81:16:c0:c3:6f:7c:08:6c:7c:af:a8:9b:
         d3:80:a4:46:44:ff:ee:d1:cb:c3:fc:af:89:62:a3:c7:ce:fc:
         6f:78:9d:c9:c4:e3:88:4d:da:bb:2f:41:ae:8d:ec:28:04:fe:
         f5:3a:4a:20:6b:f5:9c:28:19:5f:f5:60:a2:82:e4:64:13:f7:
         02:ee:1a:02:bf:e8:25:db:7e:c5:bd:7c:e4:76:71:d7:82:0e:
         60:6b:1f:10:18:9a:08:a0:65:a5:8a:73:0f:e6:45:dd:15:67:
         ef:b2:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----