Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
File:                     x3_gBdfljsAzypq6h-BgYCFTNhc.cer (raw, json)
Hash identifier:          0E6aiDa4b7Q2rQJ+aSyMYHWX1YlpJfrUXJnB0dwMMak=
Subject key identifier:   C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427485354135812C71C83D64C397172E8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49840
                          IP: 95.142.128.0/20
                          IP: 185.235.44.0/22
                          IP: 2a02:26c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:53:54:13:58:12:c7:1c:83:d6:4c:39:71:72:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c77fe005d7e58ec033ca9aba87e0606021533617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:73:7f:6c:23:b4:fa:44:d4:63:60:eb:1f:
                    38:53:0a:c4:36:80:32:ae:03:d6:a6:28:4d:36:17:
                    52:c5:2e:20:1f:97:17:f7:02:9f:c5:b7:c4:4e:17:
                    e5:f8:13:ab:cf:56:18:41:79:39:81:b7:fd:1c:6e:
                    1d:19:e6:a5:0e:06:8d:ff:8f:6f:8c:b4:81:87:dd:
                    ee:c6:98:40:3b:65:ba:5d:14:dc:dd:08:80:f1:d5:
                    d9:37:25:83:60:3e:d1:97:30:ae:9d:e4:3c:b4:03:
                    0b:c3:9e:9c:77:49:8f:95:19:8c:17:47:d4:4d:78:
                    6a:14:01:03:00:87:c6:82:36:a9:30:dd:6d:7e:0d:
                    8d:ad:7b:c3:b5:d2:5c:f6:dc:18:30:58:bd:49:04:
                    b5:66:af:13:62:aa:c7:9c:ba:86:15:32:32:60:26:
                    66:6f:44:3a:58:bd:0e:42:33:33:3b:74:51:3d:29:
                    b4:48:9e:88:ec:a5:2d:2b:ea:79:71:24:e3:95:69:
                    15:4b:b7:e8:16:b2:66:ef:c6:23:91:e5:86:f6:4d:
                    99:94:b5:bd:75:42:bc:37:8e:6c:dd:a8:81:c9:1d:
                    9d:15:37:7f:a4:81:e2:00:aa:b2:4d:e5:c9:77:1f:
                    4f:71:c4:59:6a:c4:da:4a:fd:e6:ba:2e:6c:27:67:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.142.128.0/20
                  185.235.44.0/22
                IPv6:
                  2a02:26c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49840

    Signature Algorithm: sha256WithRSAEncryption
         8d:25:3c:3b:a3:0a:6e:c9:4f:64:0d:1e:5d:ce:a7:5b:d2:fc:
         9f:a3:0e:2c:9e:0d:0d:c5:97:4d:05:81:0b:22:ea:b4:a4:e9:
         c9:ed:c0:b3:4f:9c:71:76:7c:a3:62:17:66:98:ff:65:27:ae:
         4c:34:cb:3b:81:81:d3:7f:a3:82:6c:ee:c2:bf:b9:c3:e1:b3:
         9e:84:67:b1:12:1d:b8:aa:01:2f:8a:cc:48:00:eb:fc:08:d1:
         34:01:6b:2b:b2:df:f6:9e:03:bc:46:3f:7e:d5:89:47:13:7e:
         4d:8a:71:77:19:8e:51:fc:12:9f:f7:28:b7:62:8b:2a:f6:8c:
         8e:04:91:09:9c:4e:9f:88:6e:42:6f:6f:ca:84:dd:b5:ec:3f:
         aa:4c:45:2f:7b:68:81:45:21:e9:49:fe:cf:9a:a4:21:70:8d:
         7a:48:9e:41:69:77:0a:23:84:06:ee:3d:1b:6d:3a:61:02:a1:
         74:db:ef:f0:85:4f:16:ba:dc:00:b3:2a:fa:71:53:10:d8:52:
         ff:a9:d5:57:cd:f8:a1:7a:86:ed:87:d8:e7:8a:ec:c7:63:67:
         ae:ea:0a:84:fc:93:ef:c8:a9:26:5f:b5:2b:95:2c:37:bb:13:
         0d:ab:19:64:8c:9b:08:13:ab:9c:2f:1a:ed:9d:12:42:e0:7c:
         db:2c:9b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----