Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
File:                     vlR-u1wFb3ApbkCGISYfPE4tQjk.cer (raw, json)
Hash identifier:          LwXinHMePvCxvguizyNG4bnn23U7v7FFx+HVCqMf7a8=
Subject key identifier:   BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C7B4C76196F7AFC76D8214B5507F9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39538
                          IP: 194.15.191.0/24
                          IP: 194.31.221.0/24
                          IP: 195.244.0.0/23
                          IP: 2001:67c:2308::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:7b:4c:76:19:6f:7a:fc:76:d8:21:4b:55:07:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=be547ebb5c056f70296e408621261f3c4e2d4239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1e:26:f0:cb:5f:7e:d8:dc:14:92:13:63:2e:
                    90:80:1a:f2:53:88:38:4d:d9:83:25:64:f1:35:a6:
                    ea:39:36:0a:19:d2:af:6b:4b:fa:4d:a6:1b:ba:bc:
                    92:69:54:b0:2d:11:f6:ce:d4:1c:de:28:14:27:84:
                    17:eb:db:92:74:f1:38:46:f4:ff:57:a9:a2:f2:28:
                    46:ac:18:af:4b:91:0d:f3:a2:c6:2e:d3:63:9a:b3:
                    0c:43:aa:2b:d4:e3:94:15:e3:5f:a4:21:6b:8c:17:
                    d5:a3:26:31:ee:ed:a3:ca:56:a7:fe:0c:fe:e8:3c:
                    82:7e:0f:48:b4:75:b6:ad:52:ba:9f:7d:14:ca:e8:
                    c4:50:8d:df:29:43:d1:37:c3:34:cb:ce:3a:74:88:
                    60:61:21:59:d8:98:b0:de:fd:0d:2f:b0:1c:54:77:
                    3c:c8:7e:a3:2a:e7:38:05:7f:73:21:92:ed:25:61:
                    48:a4:4a:cd:9d:07:94:c2:5f:bb:62:a3:95:f2:64:
                    71:66:19:e0:9b:a2:62:98:aa:4e:28:04:96:a3:f6:
                    87:1c:8c:34:16:2f:56:36:de:d7:0e:0d:19:ba:b3:
                    5f:2a:19:e7:6e:20:e5:2e:ed:bb:8d:c5:01:8b:37:
                    1c:b6:0d:56:a9:e9:36:b1:da:4a:48:24:b6:e5:9c:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.191.0/24
                  194.31.221.0/24
                  195.244.0.0/23
                IPv6:
                  2001:67c:2308::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39538

    Signature Algorithm: sha256WithRSAEncryption
         5f:67:a4:dc:3b:72:fa:a0:3c:b9:db:b3:e7:8e:44:f7:9b:66:
         6d:6c:1f:c7:de:7c:58:fe:f0:45:7b:d6:ba:7a:e7:99:30:ff:
         79:e2:4f:a8:54:29:66:c3:d4:d8:1a:b5:52:f9:4b:6c:ba:60:
         19:bb:2b:b0:0b:36:14:3e:38:b3:d8:44:b8:46:8b:3a:2e:e4:
         e0:10:bd:75:a9:1d:1c:52:ad:15:78:61:89:6e:f7:73:22:74:
         0d:d5:0c:d5:18:36:9e:51:8e:c9:b1:bb:5c:a4:4d:12:d8:36:
         bb:38:a7:62:6b:cd:b5:2f:ea:c8:0d:6b:bb:94:dc:1d:49:97:
         63:38:09:a0:d6:1a:cb:3c:88:6a:1a:db:f9:b5:e2:86:b6:18:
         24:ed:83:7c:55:c4:7b:07:8a:be:de:1d:22:bd:43:ed:31:6a:
         25:3e:0e:4f:dc:47:a2:27:83:62:ee:a3:f6:aa:bb:9b:0b:46:
         56:5e:b0:89:4c:44:a9:d1:b3:5c:ea:9f:91:bf:e8:0d:63:33:
         8b:7f:4d:73:bb:fc:10:40:ee:67:02:72:b8:1c:78:99:4f:7f:
         fd:1f:d0:3e:e4:60:04:40:a8:87:ad:7f:fd:40:2f:28:b1:f9:
         47:4a:64:8f:19:31:b3:12:e9:0a:b6:b0:0a:fc:c4:14:02:e9:
         94:a9:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----