Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
File:                     0NxXC8HJZLq37VbGc6pAUY-FRXg.cer (raw, json)
Hash identifier:          +EA7SXYz0Yb59EAEDDa65hByU0o5IRPUEp7duMNzpVE=
Subject key identifier:   D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252213F8CDD31B5E16F73B20F88C0436
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12898
                          IP: 213.178.0.0/20
                          IP: 2a00:1928::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:13:f8:cd:d3:1b:5e:16:f7:3b:20:f8:8c:04:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:f6:20:80:9d:98:ab:ed:4f:3c:3d:47:6a:
                    9a:8e:3a:e7:63:22:26:e6:b5:4d:1e:60:2d:86:f7:
                    bb:49:9b:56:b2:9a:1e:b1:3d:88:61:46:41:d6:a4:
                    3d:4b:1d:98:c6:6f:45:58:0c:09:2a:8f:04:be:bc:
                    45:93:48:1e:4a:50:a1:5d:cf:76:f5:5a:3a:e9:6f:
                    dd:14:01:ab:d1:16:45:a6:2c:0a:80:a3:55:b6:59:
                    1f:7c:6e:6d:01:dd:2e:bd:39:67:09:6a:3f:a1:20:
                    96:71:4d:5c:e3:62:37:18:51:78:84:bb:f3:67:38:
                    39:15:0c:6e:6f:4f:d9:a3:05:ce:34:56:88:18:cb:
                    ae:98:db:04:16:72:d6:f9:df:c6:0b:91:86:6c:e8:
                    e9:0b:d8:f2:f6:59:7b:f0:ca:a9:8f:8d:ce:24:16:
                    0f:de:34:b8:c3:6a:ec:c7:81:c5:b3:96:bb:29:83:
                    ba:a0:92:30:59:53:dd:8d:e1:c3:1b:2c:83:d6:ef:
                    9a:61:d5:0c:5e:e8:c9:2a:f1:0e:5e:95:24:9d:d1:
                    31:a2:e4:fd:2c:df:9f:bb:5f:93:3c:5d:87:f7:52:
                    29:ca:9e:a5:d5:41:b5:c2:53:18:53:a4:29:b5:36:
                    b9:28:3b:7f:14:7e:12:ba:1d:bb:ef:df:7e:a4:1a:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.178.0.0/20
                IPv6:
                  2a00:1928::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12898

    Signature Algorithm: sha256WithRSAEncryption
         b1:53:d8:83:2e:0a:4d:e9:87:b0:56:82:cf:f8:3b:e8:83:15:
         15:d6:8b:cf:49:7d:26:a2:74:69:a4:0c:6f:9c:85:5e:47:b8:
         5c:9a:45:02:52:f3:bf:8b:b2:d4:17:04:76:39:d8:c0:9b:66:
         a5:d2:3e:4f:29:12:14:f9:03:6b:5e:14:5e:d7:df:b0:55:47:
         ee:15:9d:d6:71:71:45:83:94:d1:b5:a6:ea:a6:c8:18:90:db:
         00:18:28:9b:2a:e1:84:49:00:ea:be:b8:06:8b:34:da:9f:58:
         fc:ed:a0:c3:ac:c5:58:e4:77:6d:f6:1d:fe:b1:ff:ae:fa:50:
         16:0c:cd:bf:be:44:aa:3c:a7:81:c4:f7:cb:ad:6f:7e:ba:3e:
         63:bd:31:4f:0a:8b:ff:83:42:e4:49:c5:ef:dc:a6:02:db:f8:
         f1:b9:f9:ee:8d:ea:65:83:f3:18:05:fe:64:94:f1:95:12:15:
         cc:5f:78:19:9f:86:83:3d:96:f6:2b:36:ad:eb:07:e0:0d:4f:
         2b:8a:37:34:a3:86:8b:56:54:2f:0a:e6:65:a4:b2:e2:2d:7b:
         53:0f:36:f2:2d:ad:c2:2d:04:4e:aa:58:82:ae:d3:4a:0e:f8:
         ab:d8:d3:4e:df:34:32:0c:74:be:42:e5:ea:ec:6c:41:fc:fe:
         55:6a:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----