Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
File:                     x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer (raw, json)
Hash identifier:          8kwTOEAqK0v1blVSGVOCCCIdJClR5sEa2FCsuiCjdc4=
Subject key identifier:   C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425216F1DEE6ED9B8F1418E868E026EDC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209256
                          IP: 217.20.96.0/20
                          IP: 2a0a:34c0::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:6f:1d:ee:6e:d9:b8:f1:41:8e:86:8e:02:6e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c77549551405d9948c662dfe4de24de055daff5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:15:5e:25:ed:a1:e8:b0:fb:08:ed:ff:b9:
                    b6:68:16:11:cf:48:74:bf:89:a6:65:f7:e7:45:a5:
                    58:48:d9:33:84:a8:7f:d1:e4:8b:4f:1f:9b:c9:09:
                    d4:fe:7c:87:5d:65:23:0c:66:d3:55:de:37:c5:11:
                    30:96:74:12:7c:ee:98:1a:24:34:22:c1:46:85:c1:
                    20:fa:73:1e:6b:b1:76:c2:ce:7b:94:8b:8d:82:f3:
                    a7:d8:8b:5d:02:e2:70:f6:84:80:88:b8:33:aa:e6:
                    b7:23:36:59:17:ed:b6:83:16:61:c9:79:9d:8f:97:
                    ea:ef:70:d1:0a:47:a1:e7:e4:53:c4:96:96:74:fc:
                    94:42:e8:ef:73:b1:8e:cb:93:07:b2:6d:6f:79:e5:
                    2f:76:c3:af:1d:96:0a:e1:02:4f:97:e6:3c:5a:56:
                    57:84:b9:d9:9d:e4:c1:34:fa:2d:31:78:79:c2:aa:
                    44:47:91:21:4c:3e:d8:4b:4a:65:20:5e:25:3e:38:
                    d7:5c:99:f6:d8:f0:89:4a:40:1d:5d:32:f2:20:2a:
                    c7:ee:df:b3:1e:59:c4:dd:04:a8:fb:93:b2:0f:2c:
                    23:f9:2d:c8:d1:23:7a:48:f7:89:ed:23:3b:75:d5:
                    fc:44:4c:76:6b:fc:34:78:e6:c5:d5:f9:fb:ab:79:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.20.96.0/20
                IPv6:
                  2a0a:34c0::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209256

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:1a:19:be:0e:9c:54:12:f3:bc:5f:ca:96:73:07:d9:f4:
         e3:15:0a:08:36:d9:26:b1:75:a7:79:0f:7e:b4:88:8f:96:82:
         b9:ed:7e:64:dc:df:47:b5:46:6d:65:fe:50:fd:57:93:07:e4:
         77:30:c5:72:a7:fc:b3:6d:31:b1:a0:15:21:4a:e5:14:4b:a3:
         49:9e:80:76:37:89:c9:65:c1:a2:19:6a:79:80:b0:28:93:cb:
         72:14:b1:bb:59:72:6a:e7:ec:d2:36:40:55:24:3a:fb:38:a5:
         3d:46:c1:80:67:e8:93:f5:d5:3e:7c:34:f2:46:c0:79:d1:90:
         75:89:5b:c3:e3:16:72:75:ef:15:52:5d:43:cf:8e:13:bb:7d:
         00:71:9a:c2:21:b3:95:19:ed:e0:40:cd:45:be:3f:ff:8d:87:
         63:22:95:62:5b:7d:0c:93:54:1b:8d:c7:b1:4d:f2:db:bd:8c:
         49:62:98:ac:db:98:c7:ec:94:37:d3:2a:79:93:43:b4:0b:57:
         9d:59:12:7c:65:24:bc:45:ef:6e:d5:dd:4d:1c:69:8d:14:07:
         10:7b:4f:ea:57:5a:d4:6e:d6:17:e6:dc:5e:cd:6e:7f:7c:fb:
         27:dc:07:34:69:4e:9e:ab:2d:e4:fc:92:23:df:78:47:f8:cb:
         91:03:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----