Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
File:                     vDEkfzWabUktyZQ64PAPyL4hbHg.cer (raw, json)
Hash identifier:          SBqyzBjC0xLDMDtux17Mb/tXqp7TiSW2ANvmNN0W55E=
Subject key identifier:   BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA2186323EDB63C3824779338DEEA4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60975
                          IP: 185.19.184.0/22
                          IP: 2a00:43e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:21:86:32:3e:db:63:c3:82:47:79:33:8d:ee:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:6f:37:71:11:2a:0c:8e:29:b2:ff:c8:df:
                    38:47:12:ab:e2:6d:8f:64:8c:3d:40:5c:f4:05:0c:
                    52:24:52:2f:01:bb:be:de:75:74:9b:46:de:4d:4b:
                    25:d1:28:41:46:41:b4:c9:68:67:47:b2:d1:68:06:
                    78:1e:b1:8c:75:6e:8f:d9:a6:5b:4d:31:9b:b1:1f:
                    ce:01:87:b7:60:3d:b7:e3:b4:6f:2e:ed:27:ef:51:
                    ab:a8:76:df:9b:81:c6:be:4b:89:d5:e9:c0:e7:37:
                    3b:fd:9e:6e:c3:22:43:ff:af:c2:99:47:c8:de:07:
                    1f:46:e2:ba:ec:b2:e6:a3:e6:c7:c8:e7:53:ee:15:
                    14:c5:2a:27:3a:a1:1a:67:6d:1a:16:dd:e0:37:00:
                    d9:45:7f:64:46:1a:01:ab:7c:d2:03:bb:90:30:b7:
                    7f:50:c7:6c:7b:cf:a0:6d:9a:10:9b:2e:dd:52:0e:
                    b1:96:e1:5f:ab:d8:49:f9:79:cb:03:aa:7e:42:7e:
                    90:5b:95:ce:00:80:a7:49:26:c2:5c:2b:4d:6f:ca:
                    4d:79:aa:e0:e8:2d:5e:9e:04:9b:6b:f0:06:1c:8f:
                    7b:44:ca:25:e1:55:e9:fa:bf:db:48:66:be:87:77:
                    96:d9:3d:7c:1d:21:22:1c:21:d9:81:ca:3a:0c:d2:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.184.0/22
                IPv6:
                  2a00:43e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60975

    Signature Algorithm: sha256WithRSAEncryption
         75:02:da:75:43:51:9d:79:46:a8:79:c4:83:13:bd:07:d5:d3:
         76:39:8c:13:5d:1e:83:a1:45:39:f9:d5:16:03:15:0a:87:1f:
         79:5c:0c:f5:42:f7:86:a7:99:c5:03:c9:11:ec:28:16:b4:1f:
         f3:ce:c9:0d:bc:50:4b:24:19:6f:67:1f:4d:45:e7:24:63:a9:
         88:3c:e8:ce:d9:ac:22:6a:61:2c:f3:0d:0f:78:c3:31:e3:dd:
         d2:8d:3b:3a:3e:f1:75:b0:db:3d:da:3d:fc:06:b5:18:c6:1c:
         5b:41:d3:49:15:c2:1e:77:4f:2a:f3:01:d0:31:87:e7:4c:e7:
         26:23:d8:37:c2:b0:46:fe:b3:7b:9f:7b:25:f1:e7:0a:44:b2:
         80:cc:78:16:88:92:82:24:51:16:62:ad:c7:55:17:b7:f4:fd:
         d7:f6:4a:30:35:73:01:2e:66:13:79:f5:cd:73:81:8c:a0:b8:
         6a:b6:81:6e:71:66:34:52:67:a4:8f:4e:cc:bc:5f:96:b0:56:
         a2:27:7f:ca:32:88:69:b1:8f:f1:ef:eb:8f:40:4e:7e:e1:c3:
         0d:66:43:26:67:68:4a:5e:3d:72:d2:43:34:26:b0:b2:7c:d6:
         5c:ba:c0:87:dd:81:30:b9:ac:54:2a:e4:b7:ee:fa:dd:05:28:
         1c:79:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----