Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
File:                     xm3GDRbf4WSdhsFpPheFjCMGOH8.cer (raw, json)
Hash identifier:          FixBc7KQ4t7HrT6sGLM6bTEc6WLZJYl3ho7pBatKswQ=
Subject key identifier:   C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521CD41F1F280C85119EC0EF44D7769
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39371
                          AS: 200569
                          IP: 45.129.60.0/22
                          IP: 185.99.204.0/22
                          IP: 2a06:1480::/29
                          IP: 2a0e:44c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:cd:41:f1:f2:80:c8:51:19:ec:0e:f4:4d:77:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:80:e4:86:5b:81:fa:05:e7:ba:4f:af:6f:94:
                    8e:7f:0b:08:19:16:f6:63:82:2c:55:47:ef:54:5c:
                    4b:a1:95:21:a6:e9:46:04:c9:71:69:7e:15:f6:06:
                    e2:70:4a:70:23:b8:fd:14:4f:3e:da:61:f5:9f:9f:
                    7d:26:27:e5:1a:b7:5d:7c:a2:c3:3e:56:5b:d4:d9:
                    0f:b3:19:79:1a:23:0b:da:bd:66:b3:d5:2c:06:4e:
                    48:83:e4:83:73:04:fb:e2:35:d2:ce:ee:70:89:b5:
                    70:b6:b6:c1:71:ef:15:ef:de:9b:df:ca:58:e7:a4:
                    80:8b:c0:91:f5:fd:e4:e6:f8:2a:b5:cf:55:59:95:
                    d0:6d:62:9e:9e:c7:3e:e5:10:df:43:df:33:57:fd:
                    ed:c3:5c:88:96:ad:68:46:ff:54:b8:81:b0:c5:ef:
                    2e:55:2a:92:1b:74:7b:bc:12:85:c8:4c:e8:fb:53:
                    d9:c2:c8:ef:67:44:9a:7a:2c:04:40:2b:08:27:7f:
                    12:9e:84:58:f4:13:12:c5:f2:08:04:9d:98:52:08:
                    06:f4:b3:36:22:2a:5d:3f:84:9f:dd:81:98:67:04:
                    9b:e7:1e:76:8e:17:d1:86:b1:ea:60:e3:f5:82:bd:
                    b4:65:a9:bb:11:b4:46:c0:93:f7:57:c8:83:96:30:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.60.0/22
                  185.99.204.0/22
                IPv6:
                  2a06:1480::/29
                  2a0e:44c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39371
                  200569

    Signature Algorithm: sha256WithRSAEncryption
         91:65:82:62:29:35:44:b1:51:66:b8:c9:b1:f5:9b:d8:cc:b1:
         b2:62:ed:00:5e:d7:a7:4f:0a:07:90:75:be:b1:3c:b9:0b:ed:
         73:98:35:49:22:5a:c3:c9:bd:a5:3f:13:9b:95:1c:e8:68:ab:
         a7:f1:f3:1a:b1:7e:2f:17:a3:fc:a8:7f:f9:3b:42:0e:07:f6:
         95:6e:87:f1:b7:94:d3:23:74:6f:86:92:d6:8c:d7:98:ce:4d:
         6a:fd:74:7b:be:8d:40:12:2c:7a:42:fb:b1:46:ed:c8:e6:3e:
         2c:19:b9:4c:b5:f3:52:b1:10:7d:9d:87:e6:f4:a5:85:49:89:
         fb:41:eb:85:ea:20:96:45:70:b8:be:d0:2b:a7:c3:47:7e:0a:
         da:50:bf:60:3b:79:ce:a2:dd:26:c2:44:3c:15:93:f0:48:64:
         76:b4:d5:32:a1:f0:4c:dd:82:76:b6:42:b9:04:32:82:3f:0c:
         90:6c:90:63:b3:a9:a0:e3:bb:c1:60:8b:fd:a0:90:bc:57:20:
         6c:38:16:e5:a2:00:cc:66:eb:94:9c:c5:dc:e0:57:dd:31:1e:
         46:73:3b:16:cb:9a:5e:4d:a6:b7:cc:81:9f:18:d7:be:ec:d2:
         72:44:d2:31:d5:aa:3b:f0:2c:3e:ba:84:31:b3:50:62:af:8f:
         79:b9:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----