Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
File:                     veLbhJjuj3s6tcqug4KVlmIHAsE.cer (raw, json)
Hash identifier:          fRuppNA5q/i4FwbJDHbk0q/HrB9czGRDFWoywEL/CFc=
Subject key identifier:   BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB8F0E85F6A7857CF5F0842C23052B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41325
                          IP: 84.38.48.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:8f:0e:85:f6:a7:85:7c:f5:f0:84:2c:23:05:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:76:75:99:7c:1f:7f:b3:ca:a0:12:2f:81:
                    16:30:06:9e:f5:c5:7c:92:ad:46:a5:c1:a9:5e:d1:
                    91:60:bf:b6:f2:52:26:23:f2:9b:1e:94:52:78:bf:
                    a0:ab:38:9e:83:67:4d:d3:56:81:16:01:3f:1e:fa:
                    8b:20:73:24:72:5b:ce:06:03:9b:66:75:95:56:17:
                    4d:c4:a3:ba:9e:90:13:69:b0:0f:aa:59:12:84:c0:
                    61:55:d0:c9:c9:43:80:79:cd:e2:5a:b8:ab:29:65:
                    ed:6f:c7:a6:c7:e1:5e:b3:e7:ae:bd:d7:ea:08:0b:
                    6b:cf:36:04:44:4a:9a:68:b8:3d:df:7c:fd:50:3b:
                    1d:65:6f:96:0e:d2:08:b4:f3:cf:68:d2:e0:a5:08:
                    bc:46:af:fd:4c:8e:60:47:65:09:16:12:3c:68:08:
                    c7:2f:28:7a:96:b9:2f:cb:fe:9f:92:62:95:34:a7:
                    4d:ff:dd:8c:83:dc:80:b9:d6:80:9a:b0:af:f7:d9:
                    e2:fc:2f:e0:a3:93:0f:80:4d:4c:88:00:1b:8b:e4:
                    dd:c3:5e:2a:b3:a2:5c:df:21:d9:f1:cd:f6:ae:b4:
                    87:8b:9f:ff:cc:bd:b6:27:5b:25:dc:6e:7d:53:c9:
                    fa:3c:cf:8b:a3:19:c8:1a:fc:18:f3:7b:58:16:76:
                    c3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.38.48.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41325

    Signature Algorithm: sha256WithRSAEncryption
         9f:9d:d4:bc:84:32:75:6e:96:36:9a:d2:5e:02:66:8c:b4:9c:
         15:07:e3:3b:29:8d:a4:d5:3f:8e:ce:8b:2c:68:e2:c0:67:2c:
         cc:5b:78:76:e2:74:59:cf:e2:cf:c0:69:bd:16:fe:ae:49:2d:
         5b:ef:4d:ac:26:bc:67:2f:37:56:b5:44:b8:6c:c9:f9:3e:d6:
         83:80:d6:38:24:c8:5a:47:4e:c5:09:f4:2f:ab:33:07:46:a0:
         2e:94:d3:60:c3:b4:19:48:8b:39:d4:72:28:e3:68:ec:30:c0:
         2a:54:bd:95:91:e6:ef:3d:db:1b:a0:2a:20:f9:ab:76:ba:69:
         ed:8c:a2:f7:65:32:92:37:0a:dd:2e:a3:9e:31:b0:25:b7:89:
         25:bc:5c:7b:ea:a1:58:75:7f:fd:77:f5:e5:ab:c1:7b:27:89:
         ed:70:b6:da:b3:75:0f:5f:84:d2:7c:d2:62:3e:59:50:0d:7b:
         a9:04:82:d2:e3:dc:e3:26:8b:b8:6b:7d:97:41:fe:6f:c2:55:
         ae:7b:5c:08:db:c3:5c:3d:eb:93:60:d6:5e:84:0d:52:7e:dc:
         86:c8:54:2d:73:b7:75:9e:87:b0:5f:74:3b:da:ad:c1:1e:08:
         48:2e:ee:d2:06:2c:be:2a:0d:1d:fb:ae:46:9d:65:74:7a:e0:
         2b:df:8e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----