Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
File:                     1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer (raw, json)
Hash identifier:          hTAHsq79XerYWyiTWagzFM2MwZisfEo4aHWREi4ge94=
Subject key identifier:   FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C4C9E05FC4D5A53D1FF18BADA1B40
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215900
                          IP: 2a14:7b00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:4c:9e:05:fc:4d:5a:53:d1:ff:18:ba:da:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:fc:9a:c8:f2:12:9a:2b:30:ad:25:bc:ae:
                    0a:a7:c8:7f:14:66:8d:66:41:5d:df:ca:cc:8f:33:
                    b6:dc:d2:08:76:d9:1b:a9:6c:be:2a:05:5f:1d:e3:
                    8f:8b:85:93:b7:3a:b3:a7:e6:e8:91:31:86:14:39:
                    07:52:ae:e8:da:58:11:84:a6:28:71:f0:9f:7c:66:
                    27:10:4f:6b:24:77:33:15:ce:95:4c:fc:d0:92:55:
                    e8:62:5e:07:7d:26:b9:c4:12:98:8c:62:7f:17:4f:
                    37:b6:70:24:95:f6:fd:bc:4a:4a:a8:0b:c2:35:10:
                    f8:9a:71:01:c7:79:e8:bd:84:9f:92:af:1e:66:b9:
                    4c:64:90:04:19:1e:57:4d:60:b2:29:3b:b3:14:ba:
                    75:1b:fc:12:eb:c3:33:1a:90:22:84:e0:10:a3:f5:
                    9d:b9:31:36:a9:04:c8:fe:25:9b:f6:ee:5d:3b:6d:
                    f4:55:67:12:3c:b1:93:2c:44:7a:2a:cf:31:71:c0:
                    97:cc:96:73:92:94:ec:61:0a:7e:ef:1c:db:b3:40:
                    6b:0a:c7:24:77:48:8e:1d:f2:f7:60:0a:3a:e2:ac:
                    b3:a3:03:1c:0e:30:f4:bc:c8:25:7b:21:84:c4:6a:
                    33:a9:6b:89:a1:3f:e7:26:10:62:65:eb:01:e0:6a:
                    8a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7b00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215900

    Signature Algorithm: sha256WithRSAEncryption
         aa:5a:bb:77:46:93:0d:bd:c8:2e:e7:50:e9:4c:5f:2d:96:26:
         68:d8:2a:49:f7:77:33:c3:26:55:11:9c:bf:10:23:d0:51:7a:
         84:64:a9:05:5b:67:cd:3b:54:ba:4d:1d:2f:fc:2a:13:3b:d5:
         80:e4:59:ff:3a:53:34:93:9f:bf:1b:ab:b8:93:fc:ba:7b:7d:
         dd:66:73:59:c8:68:86:42:c0:1f:ed:be:ff:cd:21:98:c5:8d:
         9c:b1:46:ba:b6:a9:e3:83:2a:d5:09:1c:f9:a3:36:36:90:c4:
         56:a3:a9:df:91:1b:8a:c2:ca:84:6e:4c:21:2a:4a:3f:18:a9:
         26:ef:ea:96:10:47:f8:85:37:cb:8b:55:98:6c:85:d6:56:6b:
         ad:81:78:1c:5e:ef:2d:6e:5d:52:11:c8:19:7d:cc:d2:68:b9:
         99:cc:1e:4d:51:ad:cb:da:0a:5c:de:0b:27:76:47:6f:f4:74:
         b1:fb:e3:3d:26:7e:2e:b1:14:ac:2b:a9:5f:85:c9:e9:cc:4b:
         83:9c:58:1d:53:3e:ba:a1:40:f0:af:a0:e9:8f:1f:5f:51:1b:
         f6:3c:ac:fb:d6:84:e8:12:0f:91:5d:4a:4d:d1:a7:71:c4:3c:
         84:61:b7:d1:ec:c6:29:fd:9b:52:84:e5:25:2b:83:91:ae:46:
         46:74:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----