Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
File:                     Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer (raw, json)
Hash identifier:          bow64Ejj4t3NfjhSrApbY9w5Rsi690mArwyHkca7pek=
Subject key identifier:   09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B369B53C1B44D43060941BE3FCEAAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207153
                          IP: 185.164.68.0/22
                          IP: 2a0a:cc00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:69:b5:3c:1b:44:d4:30:60:94:1b:e3:fc:ea:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:3b:0e:b0:2b:2f:17:eb:ec:8c:47:ff:ba:
                    52:5e:d0:0f:03:18:cf:17:d2:8a:11:73:69:52:26:
                    52:e4:d9:c0:7e:aa:20:e0:95:1e:2d:76:8d:31:6a:
                    de:11:1a:49:33:d9:c4:79:c5:56:6c:80:61:1c:b6:
                    eb:92:94:30:8e:ba:35:d4:5b:47:ee:32:9f:21:78:
                    d1:92:44:59:4c:8a:f1:80:64:5a:8d:77:be:dd:06:
                    e5:74:65:cb:45:10:cf:47:2f:13:4f:45:53:3e:31:
                    e9:9c:8b:8a:72:d0:68:24:b0:f0:c5:f1:2f:fe:30:
                    f8:ce:30:cb:14:bf:62:91:be:24:95:9f:df:69:48:
                    2a:bc:5c:c0:62:ae:ba:13:28:2e:75:5b:01:d8:99:
                    a7:e3:1b:4e:a1:72:e0:1c:d4:ff:06:73:ce:7f:f1:
                    5a:48:2a:36:7a:37:ca:0b:8f:a0:65:28:49:d8:11:
                    bb:5c:8d:21:36:93:52:35:0d:0d:aa:a0:ed:1d:15:
                    bd:d5:c1:5b:d5:b0:66:03:fa:77:78:c4:19:37:83:
                    d5:e9:de:05:b3:34:61:a5:b4:9e:0c:db:b7:37:35:
                    a2:30:6a:86:de:fc:91:73:e8:fc:ae:05:90:f7:fb:
                    0b:9d:8c:c1:7d:5c:a0:84:07:bd:52:18:9b:f1:5c:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.68.0/22
                IPv6:
                  2a0a:cc00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207153

    Signature Algorithm: sha256WithRSAEncryption
         91:09:98:f1:95:c3:63:1c:fb:4f:00:fd:27:dd:4d:de:1f:47:
         3b:36:46:e3:08:b5:3b:88:4a:d6:6f:bf:ce:8c:ce:73:59:e7:
         14:fc:3e:9e:d9:7e:1f:1d:d5:ed:e4:fe:39:09:40:5f:9d:c9:
         19:8f:ba:f8:e3:b7:87:fd:55:71:56:e3:b2:50:fb:1a:54:ff:
         12:4c:47:93:a7:66:83:2e:9d:f8:3e:0f:96:51:9e:4f:f1:da:
         64:76:55:91:9b:38:fb:ba:94:b9:61:24:45:f8:ec:7c:6d:51:
         a6:c1:6e:ef:a8:eb:a3:76:26:27:34:01:31:59:ef:11:d3:24:
         49:fd:30:47:4d:4a:cd:f5:dd:b7:94:fa:66:7c:5b:b5:e1:cc:
         e0:f5:c1:aa:57:90:3a:5f:f7:ef:60:de:07:8d:25:69:ff:d4:
         4f:f4:18:88:58:15:0e:88:dd:a5:c4:b2:bd:1c:18:ce:48:87:
         94:97:12:a3:45:37:8e:81:14:03:54:38:86:f7:f9:c9:fb:8a:
         9a:b9:aa:da:6d:03:c2:e9:2f:e7:b2:1d:de:37:3e:66:a1:47:
         84:ca:12:ea:60:12:7e:00:76:69:d0:fc:6f:23:55:c3:73:b5:
         04:06:13:c0:a8:78:81:21:04:ae:ff:db:8d:cf:d8:36:17:4d:
         35:bb:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----