Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
File:                     t3gT9sVnClhoatw9SVV0QpXdFBk.cer (raw, json)
Hash identifier:          9rx/voVqGHYmNVOdAPx0AWRSgG2U+0ABdTX2da01gwE=
Subject key identifier:   B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA0F66BC7E5E290C1217EEA1F7174F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199806
                          IP: 193.84.252.0/24
                          IP: 2001:67c:1828::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:0f:66:bc:7e:5e:29:0c:12:17:ee:a1:f7:17:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b77813f6c5670a58686adc3d4955744295dd1419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:ba:4b:d3:ac:38:73:00:3f:53:7a:e6:3a:
                    ef:94:03:a0:a2:4b:57:a7:48:f7:e0:c1:f9:9c:82:
                    eb:4d:b5:a3:75:45:d3:17:65:a8:47:e0:d2:0d:96:
                    58:94:a9:9c:cd:9f:f6:42:32:75:4f:e9:39:a7:ce:
                    1e:38:af:9d:f8:41:e5:38:eb:99:3b:61:9f:d9:1f:
                    fc:76:ff:c2:fa:40:cb:1d:e3:b8:5e:a7:09:ae:d8:
                    ac:10:fa:62:d8:df:af:79:18:68:8f:35:4d:30:3a:
                    28:18:8d:6b:e4:c7:5d:da:39:4a:4d:b8:aa:16:d5:
                    e8:30:6c:e5:22:92:6a:67:e6:02:d7:23:41:62:32:
                    0b:54:28:36:6c:30:27:d2:1b:a0:df:f1:83:d6:04:
                    df:9e:9c:86:36:24:8b:31:d7:76:04:26:61:8c:30:
                    26:a0:3f:b4:c9:27:72:88:f4:d9:a8:0d:94:7a:1b:
                    c8:36:49:6d:00:22:75:32:62:db:06:34:74:9f:6e:
                    76:5b:a2:12:c1:03:c6:18:01:d4:5b:29:6c:6c:0e:
                    81:92:ce:d1:a9:ce:cf:93:9e:75:73:06:f9:b2:d0:
                    bf:63:23:85:85:16:39:2a:ef:9e:a2:aa:bf:46:1d:
                    24:38:4d:b3:40:4b:6d:8c:10:55:cf:e9:11:48:81:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.252.0/24
                IPv6:
                  2001:67c:1828::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199806

    Signature Algorithm: sha256WithRSAEncryption
         a2:9a:9b:35:89:6a:95:02:75:69:7d:c4:36:0f:98:9d:c7:74:
         93:bb:9c:84:4a:66:93:cb:8d:c2:44:1e:c7:8d:0e:c9:b9:a4:
         b5:9e:75:7f:90:9b:42:d1:60:f6:61:ed:b3:94:da:74:06:44:
         f0:dc:aa:dc:c1:4d:d4:d0:33:e0:94:c5:4a:85:36:58:c9:e1:
         50:21:19:c1:18:ff:f1:f6:4b:a7:1a:9a:12:ec:17:6b:73:0b:
         b1:f9:2d:37:53:d7:bd:5f:75:b9:a4:70:d9:91:b5:d8:3a:77:
         aa:e6:ff:d9:e2:c9:40:0d:f3:f5:67:22:ff:7f:42:0e:f9:27:
         32:18:7a:68:21:05:0a:ba:d0:45:f4:eb:9b:77:33:45:d4:2b:
         d4:aa:be:f5:09:95:86:c2:1b:95:ef:e7:18:3a:12:e6:ff:8a:
         d3:7d:86:e1:e8:43:5d:12:39:92:d2:a4:ef:61:62:c0:39:9d:
         2b:50:64:fd:6f:3b:a9:e2:58:67:9e:65:6d:f4:1f:5f:52:b0:
         2f:3a:3f:3e:cf:29:75:1a:dc:2d:7a:1f:8c:8f:eb:71:ed:41:
         6c:96:50:f9:3c:0c:2a:a9:e8:f7:e4:c7:5d:8f:95:be:62:d2:
         e6:3b:1d:07:80:ff:78:c1:9e:f2:9d:4b:ac:42:84:73:ba:68:
         0c:db:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----