Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
File:                     7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer (raw, json)
Hash identifier:          3XPb0zjBQsB0AKtM3PpXWEOwbbSNz0xZhCj5bOwTR1c=
Subject key identifier:   EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274791AF18B6C47763B1DFDD91E35C21
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214285
                          IP: 2a01:f480::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:91:af:18:b6:c4:77:63:b1:df:dd:91:e3:5c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:09:3f:5c:10:56:10:bf:67:3f:2e:6a:38:
                    7b:da:e0:8e:f9:fc:f3:58:78:fe:1b:6d:2d:3c:9c:
                    d8:23:e2:1e:f6:e9:1c:c2:75:dd:d1:ef:f4:25:26:
                    1a:06:e6:78:c0:4b:3a:84:3d:16:33:b1:01:4a:04:
                    73:25:e7:66:57:8e:18:c9:54:2c:26:16:30:ee:3a:
                    d5:55:c2:ea:f0:1f:1a:fb:a0:2b:13:d1:d6:e4:a7:
                    32:23:ae:cd:45:4b:01:c0:e9:78:8b:44:04:04:ba:
                    0e:d1:24:0b:9b:00:59:0c:e8:dc:9c:3f:1c:2d:50:
                    c5:fd:9c:40:90:35:cf:ef:d1:da:ac:f5:d6:90:51:
                    4d:c5:12:dd:84:d4:8d:17:cc:0d:87:d6:fc:e4:63:
                    71:b8:16:52:53:51:f4:59:b2:ce:e3:08:83:8c:29:
                    86:bd:b5:9f:4a:70:e9:79:f8:8d:fe:32:a1:bd:fe:
                    a7:b7:61:29:38:79:1b:5c:ad:ec:06:54:21:64:8a:
                    01:c1:19:4f:46:c0:3a:e8:f7:d9:d5:59:3e:00:bb:
                    01:0b:30:4e:ff:3c:19:d1:48:46:6a:de:c1:d6:5f:
                    7d:bb:bb:bf:03:45:74:ef:c2:de:4d:37:ba:11:5f:
                    65:b5:3a:32:17:97:30:dc:04:8b:20:9d:81:5f:3e:
                    30:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:f480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214285

    Signature Algorithm: sha256WithRSAEncryption
         14:fa:0f:58:e9:41:1a:2b:41:9a:f0:21:ae:49:d9:f3:6c:0d:
         7c:77:e1:28:42:c4:1b:0e:60:93:ac:8f:61:d8:4e:59:e7:a6:
         c1:36:1e:ce:26:78:69:49:9c:43:f9:b7:19:81:6e:29:35:ff:
         03:8a:aa:b8:32:78:ac:7f:49:be:72:60:e4:4b:c2:fb:8a:67:
         2b:45:ba:31:2e:61:26:8e:d2:26:b1:90:4c:57:84:7e:a9:54:
         8f:05:80:cb:02:f0:96:a5:87:85:61:6d:d9:28:5c:6d:a9:b1:
         9b:be:cb:18:e5:74:89:34:3b:51:ca:0f:6d:9e:43:01:2b:45:
         42:e7:5a:e3:d6:b3:5b:6f:37:3c:6d:99:f0:22:3c:9d:be:c7:
         93:5e:d9:66:fa:fa:e9:48:ae:e4:fa:2b:84:31:c4:e9:2c:57:
         06:15:26:d5:f0:d8:60:6d:77:f6:96:28:7d:84:02:8c:b0:cb:
         27:7b:c2:2f:73:ea:fc:b0:ed:99:1b:aa:fc:7b:bc:3e:0c:e0:
         5e:6d:38:94:4f:36:81:51:8b:33:08:c7:58:5a:27:39:d7:f5:
         59:85:78:5e:82:e9:db:bf:cf:a0:a4:45:97:87:1e:bf:65:33:
         70:cd:8d:4c:6a:57:33:21:2b:f6:91:ad:6e:f6:28:7e:f2:82:
         47:ed:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----