Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
File:                     pSNBhTlzXL2bC6PCeew1V9cmJlo.cer (raw, json)
Hash identifier:          Ndry8YM++8sBuRwAnzrCpgBJ0ZyBGYQQLbATlPYIuA0=
Subject key identifier:   A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC1B24AA77E8417974B2B63D4436E9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44471
                          IP: 2001:678:e00::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:1b:24:aa:77:e8:41:79:74:b2:b6:3d:44:36:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a523418539735cbd9b0ba3c279ec3557d726265a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:d7:86:fd:0c:75:10:64:ae:a1:80:94:db:
                    67:80:31:aa:00:ad:a7:cf:ee:ad:43:3d:eb:6c:b8:
                    cc:fd:08:85:b4:9a:7f:59:60:97:fc:7a:51:be:b4:
                    ab:f9:59:ed:00:0d:0b:db:96:16:9d:21:fd:c5:84:
                    3a:d4:c0:8e:1b:f6:d4:2c:59:e3:d5:2a:1b:e2:5f:
                    ac:f7:09:34:be:a0:b4:b3:08:6d:d6:c1:fb:79:92:
                    44:34:87:9a:8b:0c:3d:58:84:51:b5:31:2e:89:e3:
                    c1:40:93:5a:25:f6:07:4f:63:5b:13:34:7f:f6:26:
                    fe:bd:93:b2:89:33:b6:e3:1f:d9:4e:26:cb:78:b3:
                    57:0a:64:d7:4b:3b:27:13:34:b7:3b:b4:bd:0a:c2:
                    52:29:6d:2e:5e:40:91:b6:fa:b4:4b:5b:f4:d1:d6:
                    03:ef:56:75:f3:40:62:5b:9d:39:4a:d4:e0:62:ea:
                    dc:6a:60:98:2d:b4:28:be:87:07:6a:68:a5:1a:73:
                    09:00:db:b4:26:18:74:dc:1f:35:78:85:48:ba:b0:
                    73:1f:23:9f:2c:62:09:76:f2:ba:4b:78:45:ae:c3:
                    e6:85:3f:af:21:cd:b0:10:b8:39:91:6b:82:ae:f1:
                    9b:b9:fe:3e:8d:dd:ae:72:db:d0:61:ec:e5:e4:26:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:e00::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44471

    Signature Algorithm: sha256WithRSAEncryption
         67:92:d2:b7:73:fe:86:99:b4:73:6d:9c:8a:db:00:4b:b6:64:
         37:19:0e:ac:f9:ce:6d:9a:40:ec:b1:c4:8e:ca:50:f0:bd:8f:
         d6:64:c2:a2:24:d4:50:bd:19:2b:25:41:de:cc:17:1f:05:34:
         96:f5:ae:5b:34:53:d4:62:48:fa:35:2b:96:01:16:d9:2a:3e:
         fa:06:db:92:9f:8c:c4:1c:f9:3b:25:cc:47:df:d8:c4:2b:24:
         11:75:d0:31:7a:09:3e:ca:04:38:7a:b7:34:cd:07:5e:18:2a:
         a3:f3:d8:73:7c:07:97:d7:32:84:a5:1c:fd:ac:12:e0:2f:30:
         1d:29:0a:c8:6b:c9:dc:72:bf:dd:83:d4:15:86:c7:fa:1d:90:
         c9:f1:1d:35:f2:d7:2e:1c:33:cc:a2:85:dc:7d:30:3b:de:33:
         ce:dd:21:e2:5b:c9:5d:12:56:9c:13:72:f0:31:10:ff:2b:c8:
         fb:ca:68:9d:3c:4e:ad:a2:17:0d:76:f0:5e:d5:4c:30:03:a1:
         cd:32:f2:d2:fc:50:53:66:76:8c:fc:3c:9a:29:34:03:36:a2:
         6d:e2:43:07:85:21:a6:1e:f3:91:06:18:5e:ab:0d:85:f9:e6:
         b3:57:8c:c5:75:3d:02:0e:a9:9d:c2:bc:ea:72:a6:84:60:49:
         62:24:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----