Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
File:                     1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer (raw, json)
Hash identifier:          VuHuGJ65SitKhBy9FBrDp/GobD+GjFwyfKxT+7f2LyY=
Subject key identifier:   F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427474B290AEB3885AD92713565404839
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201929
                          IP: 2a02:65a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:4b:29:0a:eb:38:85:ad:92:71:35:65:40:48:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:e1:ac:f4:c7:d5:5c:83:13:a4:a8:f7:22:
                    2f:4e:99:21:9a:ad:48:76:ff:ff:28:97:f3:3a:7d:
                    4b:1a:d8:ba:60:78:ec:5d:0f:23:eb:91:a1:93:53:
                    10:81:11:7b:db:25:a3:4f:7c:cc:a5:4b:8d:69:a1:
                    52:05:1f:c1:3d:5d:74:26:0a:92:2a:e5:e4:f6:b7:
                    0a:ae:27:74:8e:1b:3e:61:b2:7d:51:c7:43:f6:cc:
                    7f:5d:09:e9:1a:53:40:c7:98:e5:33:f9:e4:01:3a:
                    b4:1b:1f:18:51:2e:e9:fc:c4:9c:18:26:56:53:80:
                    1f:2b:83:a7:fc:87:ba:99:cf:fe:d3:76:ce:18:8f:
                    ed:e9:25:92:8c:5a:15:24:1b:54:b9:53:9f:46:f9:
                    b0:56:21:c4:dc:6b:ec:89:a1:c3:79:77:fe:ea:ab:
                    21:ae:dc:75:83:7b:e6:46:81:32:cf:97:30:88:d3:
                    5e:e6:d7:0f:09:f9:bd:56:0b:f4:43:f3:03:53:29:
                    03:2b:fc:da:ef:ea:3d:a9:aa:01:73:4c:0e:dc:f0:
                    29:5b:96:6a:15:da:96:de:2d:57:f2:84:8d:7e:fa:
                    a5:f9:ea:bb:9c:db:4d:c4:cc:70:ef:c9:71:1b:60:
                    e7:e0:f0:76:bd:d8:21:b8:7a:37:fb:c0:4a:a6:4f:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:65a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201929

    Signature Algorithm: sha256WithRSAEncryption
         30:01:1f:61:36:1b:1a:9b:03:08:47:66:77:2a:9d:2a:79:4e:
         e8:8f:77:67:82:df:ca:36:85:20:9e:1b:da:0b:08:a8:44:b3:
         5e:4b:19:cc:d6:6a:00:19:01:b7:d2:01:18:e7:69:20:b1:29:
         3e:69:4c:31:38:c4:8b:0b:34:ed:3f:fc:ce:02:e6:44:bf:d2:
         fe:e1:9a:72:d0:7f:58:ec:51:ec:6e:26:48:ee:70:93:f0:11:
         62:36:d4:7b:af:6d:14:49:4d:be:ce:ee:c6:10:17:8e:30:e2:
         ea:e3:4c:24:19:88:48:0d:17:23:a7:29:76:0b:70:ee:31:36:
         4e:d4:92:29:b9:b1:8b:83:a5:6e:c8:78:cf:d5:6e:1d:c4:85:
         0d:20:51:d6:0c:c4:7b:87:38:3b:cc:95:29:51:fd:3f:13:36:
         9d:9a:63:0c:90:e9:ae:20:64:03:9d:d8:2c:87:8d:2d:e0:49:
         6e:7c:22:6f:42:cb:2e:dc:21:e3:68:a4:3a:ff:3f:4d:3e:3a:
         5b:50:e3:e7:56:e5:39:db:da:3d:53:e1:da:ea:b4:69:88:e5:
         93:36:e4:29:78:38:40:7f:a4:2d:e0:9d:58:4f:7a:da:e8:ad:
         61:14:4c:1a:5f:b9:b3:9b:22:e7:95:fe:ba:5c:7c:02:51:7e:
         23:22:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----