Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
File:                     L42NDO68zXW2BrpJaPXHlG6NR8A.cer (raw, json)
Hash identifier:          hc2ED24tHt9Di+adW7Di50EjznXzYT25dnQzITurieQ=
Subject key identifier:   2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB559404C4E941D47714BAA351D2F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199268
                          IP: 2001:67c:1328::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:55:94:04:c4:e9:41:d4:77:14:ba:a3:51:d2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:8c:ff:ba:8a:91:69:ac:10:11:11:7d:1a:
                    bd:1e:b2:0d:5e:81:46:3e:54:e2:ad:74:80:7e:5e:
                    65:0b:e0:66:c5:dd:82:e9:8d:a1:33:48:3f:80:b6:
                    f2:6b:da:71:f2:98:44:61:5f:ca:be:6f:13:71:a1:
                    83:65:04:b1:85:3e:a5:1d:d6:55:5c:20:ec:4e:af:
                    f9:ac:d0:f9:3c:a1:23:6b:a8:6b:cc:14:91:ca:b0:
                    2f:ea:42:d5:b5:86:67:47:89:71:9a:51:01:34:cf:
                    10:3d:47:9c:af:dc:53:39:31:45:46:60:59:44:90:
                    e0:bc:de:10:b1:74:60:05:e2:0f:c7:14:f5:c5:ea:
                    0b:c3:1a:cc:5b:34:d5:58:68:e5:da:91:3c:b3:c9:
                    16:fd:7c:e5:f5:3a:b0:4d:fb:ea:83:ff:06:9a:14:
                    d8:d4:34:55:bb:07:f0:a3:6e:18:df:28:46:ce:c2:
                    2d:4e:17:04:23:ef:64:45:8d:28:a4:7a:67:13:3e:
                    a2:e5:3e:1b:25:e2:58:9d:48:09:f2:18:65:cf:54:
                    92:26:d2:e4:ec:dd:84:9c:e2:37:95:68:3a:8a:6f:
                    22:1f:d8:37:e6:1f:9f:15:46:48:25:3e:bb:79:0e:
                    33:a6:cf:bd:75:61:37:c8:e7:57:ac:27:54:b2:29:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1328::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199268

    Signature Algorithm: sha256WithRSAEncryption
         39:83:a4:c4:e8:36:cd:cd:c6:63:11:7a:2e:8c:d7:c2:70:6d:
         db:3b:e2:32:a5:18:78:5e:cb:59:f7:b9:d9:2c:84:b2:20:3c:
         34:cf:52:73:15:34:43:fb:6f:80:de:a7:95:2a:d0:d6:6f:9e:
         3d:59:92:c3:da:c2:5d:bd:b3:5a:11:d8:f8:54:43:98:de:ff:
         b6:2d:85:13:7e:72:71:17:e3:25:9f:15:6f:73:54:38:66:b5:
         78:c8:a5:27:f4:37:c7:f3:9b:56:6d:0c:d0:73:f0:cf:e1:b2:
         20:7e:6e:8e:30:2d:80:2c:23:42:ff:05:21:4a:d5:1c:fd:ae:
         c6:4c:ed:b8:a3:80:22:7f:50:74:76:1e:bd:1b:49:c3:93:e6:
         8f:bb:3c:5e:0b:b2:e6:6d:01:ec:5a:7d:16:02:bd:dc:b9:c2:
         29:d0:0f:53:9e:a9:a3:19:1a:af:81:9e:03:18:aa:de:5c:78:
         b4:0f:5a:72:4d:3e:ed:b0:38:a8:f1:15:b8:27:88:29:f5:fa:
         c7:6f:76:69:b3:d6:bf:fc:3d:18:33:34:ec:6b:11:d6:75:a9:
         20:d1:34:07:bb:4e:b4:92:8c:50:f0:ae:4c:66:48:4d:54:60:
         e7:d1:9c:e6:cb:0e:c7:f1:0b:e2:a3:bb:ac:28:fc:e1:63:d2:
         7d:74:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----