Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
File:                     FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer (raw, json)
Hash identifier:          XbBQ0uc1tenD8knMsJysDkKZ56m/tKcs41YDD/oZvSE=
Subject key identifier:   15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D74E9D5F7BBD393257CDFEDF16479D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201193
                          IP: 185.76.232.0/22
                          IP: 2a05:5dc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:4e:9d:5f:7b:bd:39:32:57:cd:fe:df:16:47:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=153d757b77067befd9446694748ad2b04e97b38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:1f:88:20:b6:94:b7:39:08:27:72:82:39:
                    1b:d3:d4:46:1a:b2:5b:17:ad:cc:36:f5:e8:0a:38:
                    e8:a8:74:b5:d6:be:78:a2:26:17:22:c6:76:9b:94:
                    a1:d5:25:48:1c:63:bd:53:b7:0d:f6:2d:d0:88:c2:
                    3b:b6:ee:d6:e1:6f:8c:0d:b5:7c:8d:7d:72:18:44:
                    7c:d0:48:ad:55:d6:c2:61:6c:f0:96:bd:32:9b:55:
                    3a:68:46:79:86:6a:16:f4:ab:13:e3:3b:27:78:02:
                    00:40:66:59:9a:ae:ab:a7:0a:13:b8:1b:d6:49:ca:
                    14:e3:04:14:d0:14:10:ca:42:0c:ca:3c:6e:ac:79:
                    4b:df:0d:8b:27:49:5e:c9:9b:da:51:ec:8f:72:c7:
                    a5:85:04:b5:37:45:ff:36:23:8d:18:70:99:bf:67:
                    6a:eb:16:16:b0:d3:ea:0a:25:17:30:eb:65:8b:10:
                    0b:1c:2f:bc:d6:48:c7:62:15:d5:34:79:00:21:b0:
                    12:e7:0a:1b:26:9e:1a:da:b6:2c:88:66:9b:13:01:
                    48:0e:cb:d3:7a:fb:f3:f1:c9:a3:f1:9a:a8:17:c5:
                    f0:10:42:71:27:87:9e:cf:f0:e5:f7:dd:4c:04:38:
                    74:98:bb:b3:bd:c5:bd:82:8e:2c:08:09:d1:a3:bc:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.76.232.0/22
                IPv6:
                  2a05:5dc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201193

    Signature Algorithm: sha256WithRSAEncryption
         73:a4:f8:e3:24:c2:7f:5e:ba:5f:7a:3f:f7:eb:d8:fe:5e:bb:
         04:44:e3:59:ca:ac:36:42:a1:fa:1f:7d:0f:be:5f:97:9d:85:
         d7:3c:ae:49:62:c5:3c:be:08:36:97:b9:be:09:e7:12:2b:e8:
         49:5b:0b:b3:6d:f3:58:d6:ad:0a:27:f7:58:05:a0:9c:bb:dd:
         54:77:d1:71:2b:f2:ee:e3:eb:4d:a0:af:4d:8c:07:f2:61:82:
         43:7e:48:c7:82:a3:3e:cc:e5:71:ec:c1:35:7d:1d:b4:68:b6:
         37:1f:9c:02:83:76:6c:df:23:f1:fa:3d:19:c1:fe:b3:b6:85:
         88:6d:56:e9:97:cb:85:64:c5:18:20:23:98:19:1c:0f:d6:2e:
         87:c3:8e:50:39:1f:46:01:8a:bb:df:c4:35:73:2b:d1:6e:78:
         8f:02:87:cc:7c:53:84:86:63:69:e2:f0:bc:d5:e0:c9:71:a2:
         a0:ce:70:bc:5e:8f:ca:80:8f:c5:5d:e6:7e:69:74:2d:b8:9e:
         1a:77:af:9e:bc:6e:43:66:13:85:f9:ee:7b:3b:4c:24:12:9c:
         e4:60:25:b8:e5:78:8a:63:64:58:e7:6a:3e:d0:a3:0d:d0:54:
         4f:99:37:04:65:ba:a7:a1:b2:92:6d:47:e5:e5:18:71:a5:e2:
         2c:36:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----