Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
File:                     G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer (raw, json)
Hash identifier:          W21OVWQVBk0mkwYCWR3wDG5N1vyzQX6BicYwzqdW2EI=
Subject key identifier:   1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F9A0378E0B27275653716F470ACE8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204388
                          IP: 2001:678:620::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:9a:03:78:e0:b2:72:75:65:37:16:f4:70:ac:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:c5:1a:04:5b:90:eb:86:0a:6b:39:2e:7b:
                    2e:4b:f7:63:93:f2:b2:95:f6:bc:98:e2:34:42:63:
                    13:5a:a3:54:7d:f6:24:c2:ce:a6:07:f4:7b:a7:42:
                    be:71:00:ff:63:6f:83:a4:1a:05:f1:2d:ee:a8:aa:
                    5e:d2:bd:84:47:35:a5:4d:09:62:3d:bb:69:05:2b:
                    c9:39:5a:4c:70:be:68:d4:71:c1:71:fb:b9:90:54:
                    e3:14:92:21:e2:3e:48:a1:69:f8:41:79:b9:20:0b:
                    19:bd:a2:f5:33:86:8d:2c:88:d7:3b:d8:41:a7:50:
                    c8:5d:5e:61:5e:70:1e:1f:b7:17:5c:3f:bb:c6:0a:
                    41:d0:03:db:70:c1:e7:ce:db:c7:7d:2d:8e:5a:52:
                    e3:18:33:b4:eb:88:92:c1:7f:77:9b:da:7c:3d:58:
                    14:33:47:16:8e:c9:60:a7:30:5a:d1:f4:3d:17:1e:
                    b3:03:84:c2:59:f5:7c:28:01:f7:18:5b:86:a3:6d:
                    32:72:0e:0b:9b:af:56:6b:45:35:4e:1f:24:1f:c9:
                    c3:52:99:b2:8f:e5:4f:44:fa:f9:4e:a3:60:b0:5a:
                    1a:3c:aa:0c:a7:1a:b6:83:88:43:1f:2c:6e:ff:f9:
                    c2:48:bd:02:8e:e9:08:98:4a:aa:14:2f:58:c7:1f:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:620::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204388

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:c5:a0:3c:bf:73:44:57:c7:6f:ac:21:6e:22:53:70:07:
         be:c0:12:c1:5b:c2:7d:71:d0:8d:08:53:07:1a:5d:e5:23:1b:
         fe:cc:a9:9b:ce:a8:c2:07:1f:46:01:af:7e:36:e2:6d:5c:2e:
         f5:61:5f:6d:a4:15:be:a7:06:2d:b6:8b:92:74:5e:83:5b:74:
         ea:f9:be:a4:72:18:55:80:4e:df:a1:bd:3a:6f:1d:fa:f2:f1:
         c1:81:fd:a4:71:33:71:ee:4c:be:0f:cd:bf:8b:5e:a0:1b:fa:
         e3:52:7e:ef:09:28:3b:a2:53:d0:d8:4d:ab:ce:1e:b7:df:d1:
         d0:ab:97:b8:b9:08:26:4c:a4:75:c1:07:0f:c4:26:90:12:79:
         9e:bd:6e:e0:9a:31:ae:38:d6:4b:3a:79:92:c0:da:62:65:70:
         dc:2f:9e:ca:de:15:3b:46:ab:30:75:98:7a:be:da:6b:c3:53:
         29:9d:c7:23:0b:8a:44:46:d0:fc:75:34:62:2a:47:be:84:30:
         b9:b7:4b:36:28:e1:f6:4c:58:a6:66:44:e4:83:8e:26:00:10:
         b2:f4:8b:f9:01:76:37:8d:c6:8a:d4:ce:c3:fb:59:1c:d7:4c:
         05:2e:62:d4:a6:3b:f8:7f:18:fe:57:df:a0:d5:a4:b1:fa:f4:
         ec:9a:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----