Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
File:                     vGY2Z5cyOLGE2e79NrvzgQukttk.cer (raw, json)
Hash identifier:          kRj7QVNkFQ5Reve09LQpUWqg3omv/fC8iLdeiVeD7A4=
Subject key identifier:   BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067E60684149F34FE35D049B59DB468
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198608
                          IP: 5.57.48.0/21
                          IP: 185.168.244.0/22
                          IP: 2a01:4c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:e6:06:84:14:9f:34:fe:35:d0:49:b5:9d:b4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:6e:42:d3:af:d3:de:75:60:75:37:56:2f:
                    8d:dd:27:bd:c5:50:b1:de:25:69:f5:68:37:28:e7:
                    2d:17:50:fc:9e:2b:9b:57:a3:e1:85:c4:eb:d8:9d:
                    c7:36:18:c3:40:42:74:cb:e6:18:3c:ce:a5:b7:c5:
                    14:1c:16:12:ae:15:a1:77:49:ab:17:5d:28:7b:2f:
                    e3:7e:60:84:d3:cd:1b:1b:6b:cf:5d:c7:cb:3b:82:
                    41:7f:1a:f5:32:77:52:7c:64:1a:9e:f8:e3:94:e3:
                    c7:21:50:17:71:24:16:73:88:62:37:11:96:1b:c4:
                    8d:ce:71:ee:73:5f:89:d8:56:f0:13:d8:24:aa:2b:
                    0c:d4:80:e6:e0:5f:f5:cd:22:44:36:35:49:30:4d:
                    b5:a6:24:33:e3:81:60:b0:a0:b8:6c:e4:5f:5f:9c:
                    2c:a6:10:ab:fb:74:01:0b:37:9e:7d:7b:b7:5e:01:
                    e5:e3:2e:eb:d4:87:93:64:c8:68:01:2f:22:bb:df:
                    1e:c3:21:d7:e7:ce:df:61:fc:e9:b7:b6:b0:c5:32:
                    b1:9c:d4:4b:4c:67:aa:5c:25:b9:43:b3:86:7c:9e:
                    52:ac:b5:e3:6b:1d:ca:ec:29:a8:eb:f8:ad:07:2c:
                    d7:3e:d1:2a:6c:1c:45:89:c9:49:e5:e0:fd:09:72:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.57.48.0/21
                  185.168.244.0/22
                IPv6:
                  2a01:4c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198608

    Signature Algorithm: sha256WithRSAEncryption
         64:04:d9:5f:37:9c:5e:db:ca:96:a9:58:2a:b5:f2:d8:36:fd:
         25:96:43:89:57:65:b5:66:3f:d4:51:a7:2c:44:50:77:6e:33:
         69:5d:c8:b4:93:ee:8a:2f:40:71:c8:1a:aa:f4:4b:fd:5d:76:
         4b:51:46:80:da:38:dd:e8:b9:fb:28:1e:fe:d4:30:13:ad:3a:
         1e:7e:7d:33:0c:51:5f:75:8d:2d:81:cd:10:46:a4:ed:0b:62:
         ab:a2:c7:4f:b9:1b:6f:f6:63:a0:76:6a:7e:fc:29:a3:e0:88:
         64:b5:12:e9:16:50:71:08:9c:f0:e4:8d:73:96:ad:97:d3:3c:
         f1:d5:29:84:25:fd:1a:94:d6:1b:f6:5e:95:e4:fc:aa:e1:5e:
         86:c6:0c:1f:dc:94:5c:6b:c6:d0:48:e0:01:5a:61:fa:ea:bd:
         0c:be:91:d7:88:82:96:12:93:41:7f:19:93:c0:60:91:3a:58:
         b2:4d:36:08:be:bd:76:90:1a:34:84:82:47:ea:b5:73:08:82:
         ef:d3:fc:0f:cd:22:8f:28:22:b9:d8:bd:c8:8e:18:e1:9e:64:
         26:03:7e:64:e8:d9:d8:d4:c6:20:60:fa:33:f1:03:45:6d:84:
         9a:44:a5:96:a6:f4:3d:3e:cf:01:2c:28:21:23:61:4a:b1:70:
         f2:14:4c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----