Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
File:                     vOLbTWWaY-QstUTFf5mjNvfZjtA.cer (raw, json)
Hash identifier:          ybLe6zBDmhbcqhMUy7mpFAXUdkOlOXg9qmlticMjbYA=
Subject key identifier:   BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195DBE5DCC255A510B32F3C8EC7DC1E5454
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Mar 2025 08:37:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51831
                          IP: 91.221.34.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:db:e5:dc:c2:55:a5:10:b3:2f:3c:8e:c7:dc:1e:54:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 28 08:37:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:00:5f:4e:c1:a8:8d:b4:c2:d4:0f:9e:09:d9:
                    e8:e8:c8:2b:de:ea:6e:9f:26:50:d3:84:ca:0a:2e:
                    84:92:57:a1:33:cd:6a:6a:14:c2:ad:51:bc:3d:81:
                    d6:ac:40:cf:f9:be:0c:1e:a3:8d:3f:c7:98:b0:11:
                    eb:4e:ab:aa:07:87:74:c1:a0:d2:fc:03:73:36:87:
                    12:34:f6:a5:9c:9b:9c:39:b8:19:b2:f7:92:a7:f7:
                    78:24:d3:c6:54:6c:3d:e7:75:6c:8b:0b:81:29:88:
                    1f:99:ea:68:c8:62:da:71:1a:cf:cd:09:43:9c:3b:
                    50:55:92:2c:5a:ec:47:ef:e0:c8:a3:8c:a9:a5:5a:
                    d2:49:29:09:72:8c:a8:e8:12:21:54:1e:c8:69:b2:
                    9f:5e:5a:52:1c:bf:6c:c6:94:c0:49:d5:e2:cb:aa:
                    17:cd:28:af:ee:ba:ca:21:eb:30:cb:c0:ef:48:d6:
                    38:7e:91:9b:4e:9a:92:4b:35:79:b5:d5:ff:a5:de:
                    17:bc:75:28:6f:71:54:c8:56:05:2a:fd:7d:eb:49:
                    fe:5d:26:89:39:2d:98:96:fa:06:fb:98:ea:61:34:
                    a4:6c:e2:a4:00:e1:39:3e:49:ef:a8:e7:57:d9:67:
                    e8:f3:4d:c5:06:71:72:70:cf:4b:51:58:f6:e6:95:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.221.34.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51831

    Signature Algorithm: sha256WithRSAEncryption
         0d:7c:e8:49:00:94:5f:ab:e5:22:4b:a2:8f:eb:17:6e:5b:4f:
         89:a7:79:97:18:33:87:99:73:e9:c5:c0:50:2f:7a:49:dc:4b:
         b4:85:3b:b1:87:28:d2:de:32:dd:d7:f6:3b:15:dd:04:6d:df:
         c3:3c:76:c9:ff:a2:ea:5e:25:7a:6d:52:66:77:ae:1c:f0:fd:
         b0:bc:94:ed:6d:ea:50:ad:c8:77:0c:64:a4:60:85:63:7a:ab:
         d1:5c:47:40:0e:b8:1b:d3:0e:5f:c8:30:a7:8b:57:c4:09:be:
         6e:32:14:86:57:24:54:bf:97:15:15:1e:42:66:7e:28:84:41:
         37:66:28:59:fb:df:5a:8b:56:2b:9c:9d:b1:00:de:46:45:f3:
         fd:e8:aa:b0:e6:05:ac:66:99:c0:e0:db:86:bf:d1:f7:6d:90:
         38:64:78:51:39:03:e1:b6:53:8c:0f:8d:54:d1:c6:4c:63:3d:
         a2:ad:bb:f3:1d:f5:d4:eb:91:9e:b1:19:46:07:e5:15:3d:22:
         94:dd:83:8a:dc:b3:ab:1f:90:19:b0:14:a3:d1:db:53:b8:8e:
         e7:2b:e1:f9:64:8d:af:22:c4:a2:0a:0d:c2:bc:22:0b:63:dc:
         29:ab:a4:cd:a3:f8:1f:8e:dd:ed:ea:e6:61:c7:35:16:50:d3:
         28:c3:86:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----