Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C4DBxQyWMRNC1dnGEkwhzLcRkqo.cer
File:                     C4DBxQyWMRNC1dnGEkwhzLcRkqo.cer (raw, json)
Hash identifier:          0BDImS/0WnQ5FbUc8oERt4fhYVJrjlPmW+LVUKi1guA=
Subject key identifier:   0B:80:C1:C5:0C:96:31:13:42:D5:D9:C6:12:4C:21:CC:B7:11:92:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB6BDFDD17DA38CFE4365369A6AA8D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202178
                          IP: 185.49.172.0/22
                          IP: 2a04:ba00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:6b:df:dd:17:da:38:cf:e4:36:53:69:a6:aa:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0b80c1c50c96311342d5d9c6124c21ccb71192aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:0b:6d:2c:34:d0:5b:c6:93:09:86:fe:03:
                    1c:14:76:49:63:ef:96:35:68:59:6e:20:e9:43:aa:
                    ec:94:f8:d5:a9:27:c2:bd:21:22:b8:1e:6e:73:bc:
                    52:71:ca:1a:78:1d:28:29:7a:0c:c8:72:1c:f6:18:
                    6f:4e:5f:67:17:0c:ce:c0:36:47:af:f9:26:bd:7d:
                    f7:18:d3:48:13:09:b1:a6:a0:28:50:5b:ec:5a:e0:
                    a2:48:2a:4d:23:83:3c:c8:5d:1b:bd:9c:bd:b3:0a:
                    d1:77:6f:36:d4:35:82:25:47:65:11:9d:13:67:19:
                    e3:aa:e6:d8:b4:51:2c:6a:02:89:35:c3:76:98:94:
                    44:e0:06:d3:11:eb:65:f6:22:bf:b1:15:41:47:fb:
                    c0:27:ab:67:50:d4:54:96:0e:4b:b5:31:2c:8f:90:
                    6d:79:70:47:b4:87:6f:ed:fb:0d:75:9a:e5:d7:5f:
                    d7:9c:13:37:5c:37:37:e4:83:3e:cb:ab:de:f9:3c:
                    c9:0a:56:15:c5:85:ca:dc:1f:da:6b:74:d3:b8:d4:
                    c8:c0:7b:83:0e:2f:25:7e:6d:ae:cc:c8:aa:35:91:
                    6e:7e:25:0a:d5:36:58:1e:62:4f:fe:8a:d6:5d:49:
                    00:1e:d7:88:32:73:4b:b6:d3:d7:9b:84:f2:fc:11:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:80:C1:C5:0C:96:31:13:42:D5:D9:C6:12:4C:21:CC:B7:11:92:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.49.172.0/22
                IPv6:
                  2a04:ba00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202178

    Signature Algorithm: sha256WithRSAEncryption
         a9:e4:86:b4:c7:bb:03:c2:99:d3:85:14:f8:bc:59:b7:2a:79:
         9a:b1:fb:2b:31:a1:28:a1:9f:c5:d7:33:6d:b1:14:c3:70:2a:
         f0:3e:0c:73:6f:4a:98:bf:d4:d4:dc:97:37:78:3d:8c:46:28:
         44:cf:e5:84:c9:6c:3a:23:61:97:f3:bc:e0:ba:99:85:27:f2:
         6d:9e:ca:c7:2e:da:ce:b9:92:29:6c:96:10:3b:bb:d3:6e:a8:
         6d:26:2c:96:3d:be:df:77:b2:a1:90:6e:3f:d3:f8:d8:fa:8e:
         a3:ed:8b:47:4b:81:36:a4:13:e7:66:a8:1a:12:9f:7b:0f:3e:
         a1:f7:3c:96:4a:f4:45:78:d1:bb:10:0d:a9:0d:fe:56:67:31:
         e3:64:78:33:f5:10:97:15:ad:0c:41:65:65:d9:2f:36:b2:2b:
         3d:26:31:78:5b:c6:df:ac:ca:59:85:b0:c2:74:62:84:03:b3:
         2e:c4:10:7b:69:10:c5:5b:23:fd:2d:26:31:3a:18:98:d6:ae:
         89:57:42:25:61:54:27:91:0f:0e:1e:c4:73:fd:c1:bd:32:2e:
         81:a7:70:77:5d:8b:6f:6c:0d:02:c4:6d:e8:70:b5:0c:f4:a0:
         ca:31:bb:de:75:04:8d:60:28:b8:63:c1:93:51:ea:35:a0:e9:
         fb:1f:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----