Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
File:                     0VK0wfXUhO78KxWX9FUAOrZUsFU.cer (raw, json)
Hash identifier:          gqIyQywV/xlZD4CSrvTwUJX81ho3nCr4Cn2Yy0F62Fk=
Subject key identifier:   D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9D3BFD9349EBC1A2B982DB52971A1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209721
                          IP: 194.26.120.0/21
                          IP: 2001:67c:2e0c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:d3:bf:d9:34:9e:bc:1a:2b:98:2d:b5:29:71:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:db:4e:6f:b1:1d:4b:92:49:0f:b2:ea:09:
                    3d:0e:23:6c:57:07:fc:fc:f6:86:0a:ad:a8:30:a7:
                    34:2d:6e:89:85:28:17:1b:15:9c:7f:ee:76:18:04:
                    dc:c4:0b:f0:ac:85:06:01:ff:22:c0:37:43:75:8f:
                    10:e2:12:06:b9:40:35:6c:ae:3e:db:e7:75:03:fa:
                    75:f9:53:6e:75:04:20:fb:a0:fe:bb:a6:d7:b0:01:
                    e2:70:3c:41:93:ab:fd:bd:b7:01:ab:9c:25:31:b7:
                    b0:77:fd:4a:b9:57:54:1d:0b:71:e7:99:80:d7:8c:
                    f9:c8:39:dc:ff:cd:c0:bc:6e:9a:3c:e0:c2:a3:d5:
                    b4:ac:47:c7:01:35:11:a4:54:13:3e:ff:c5:9a:60:
                    af:15:e0:b4:0b:fd:1f:a9:b8:49:8b:de:c6:df:d3:
                    01:cd:74:0a:ff:d6:b4:6e:e9:61:d6:59:48:55:f1:
                    b7:e0:32:0a:f7:4e:7c:c4:1b:89:99:5d:75:1e:a8:
                    23:67:f5:c5:d5:9d:3b:17:08:34:ba:79:1b:a3:91:
                    60:0a:20:68:92:68:91:b0:2c:93:2a:ec:74:11:e1:
                    fb:de:56:0b:92:6d:e3:ae:dc:99:56:26:be:f7:2b:
                    a9:6e:f4:47:fe:86:07:21:4c:51:18:60:9b:2b:35:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.120.0/21
                IPv6:
                  2001:67c:2e0c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209721

    Signature Algorithm: sha256WithRSAEncryption
         1a:32:18:6c:58:51:50:07:39:d5:f5:2b:cc:e6:e2:4c:a9:3e:
         ca:8d:c4:8f:81:77:2a:58:f5:86:50:f6:1f:b8:6d:28:a8:3d:
         ab:39:7f:6b:97:f2:e5:68:8a:66:b5:43:82:6f:3c:e8:7f:69:
         57:2e:25:e4:f1:a4:ed:be:60:0e:5f:d3:2f:31:d4:27:42:2c:
         f0:02:5e:dd:5c:a1:cf:9b:02:83:81:5b:3b:40:00:46:b9:3e:
         45:3e:98:2d:51:4d:04:7c:af:f2:31:2b:61:b8:de:a4:ee:db:
         4f:88:80:b2:b3:07:3c:bd:aa:74:e2:70:75:64:26:40:ca:0e:
         ac:85:5b:63:bc:5d:29:13:62:28:22:75:66:12:30:2e:f6:fd:
         7d:d6:30:ab:87:82:e4:ed:01:df:5e:46:10:5d:f6:80:9a:2e:
         55:51:26:ce:0e:40:ff:78:86:95:93:d2:49:73:41:12:ec:b8:
         c6:f5:b6:59:5d:f8:8a:b9:80:1b:83:15:79:1e:22:fb:93:9a:
         ad:81:3f:0b:21:c7:15:ec:98:a7:fc:b5:72:91:6e:53:18:5d:
         26:ac:ba:ea:50:6d:c1:56:2b:f5:b6:3d:e0:b0:97:c1:e5:bf:
         c1:0b:6b:7a:8b:49:1f:1b:f7:9a:ec:ab:f8:a4:b3:0a:e5:ed:
         22:b2:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----