Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
File:                     0rERWbctQBXthntCt4Q4Hl2VWo8.cer (raw, json)
Hash identifier:          hmhzr+S10lcpBbsEvGHPyPeCZ0iOyf4yTcgRc9BV7ss=
Subject key identifier:   D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942823B067EDCCCC43B0CD969B3CE55C18
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60396
                          IP: 91.209.0.0/24
                          IP: 2001:67c:2e74::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:b0:67:ed:cc:cc:43:b0:cd:96:9b:3c:e5:5c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:e3:ed:04:8e:fd:a3:97:bd:85:ca:29:a8:
                    0c:b2:da:ad:93:cf:b3:6a:03:fb:67:e4:74:77:ee:
                    f0:22:44:dc:7a:44:12:61:74:30:bf:ce:83:27:3e:
                    ff:c7:89:b6:c2:8c:3c:1b:b5:22:c9:1c:de:e1:3a:
                    93:63:ff:41:77:0e:eb:9f:fa:5a:39:41:2c:5f:fb:
                    56:6f:fb:d9:d9:59:3e:fe:77:e0:a4:e5:44:0c:36:
                    b6:74:7b:00:a3:6f:27:2e:02:71:40:38:7c:17:41:
                    1e:2d:93:7e:d0:ea:f8:27:cb:ce:7c:e7:07:74:72:
                    fa:be:6a:c4:ad:dd:40:ab:40:2b:54:c7:e9:0b:21:
                    09:cb:68:09:09:ab:48:c4:f9:09:cc:73:b2:e8:fa:
                    92:2d:6e:75:6e:34:31:ea:ff:1e:32:7a:99:60:5d:
                    35:f9:a8:6e:d2:2c:5e:10:55:0a:51:9f:6f:37:79:
                    ad:ef:9c:6a:9b:b4:ca:a9:35:55:df:ea:08:24:89:
                    2b:42:eb:d6:65:a7:0e:54:b0:a6:37:0c:f8:1b:f1:
                    b0:73:f3:92:ed:1b:1b:b7:37:97:69:e8:14:ff:9f:
                    e9:54:20:36:b0:3c:d2:03:c8:ea:68:27:01:eb:9f:
                    ab:59:ae:e4:f1:b5:b4:b7:fd:51:da:f8:5d:48:d3:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.0.0/24
                IPv6:
                  2001:67c:2e74::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60396

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:5a:5f:37:14:dc:b5:4d:39:74:a8:e6:11:76:24:26:af:
         38:8c:05:1f:b0:e7:d4:4f:83:1f:07:06:63:1c:bf:72:d8:c2:
         e4:1f:5b:e7:96:5e:89:82:67:bc:cd:2e:f1:16:82:72:0f:a3:
         ea:26:30:07:bc:14:53:14:fa:83:ce:37:72:79:6e:17:0c:e5:
         10:20:7b:6e:15:3e:f9:61:5d:49:18:37:d4:1b:78:90:d9:fa:
         26:4d:95:69:e9:66:f4:02:0a:38:c7:52:03:79:af:06:71:c2:
         e8:9a:a5:d0:62:6c:15:10:11:be:5d:f3:bd:52:99:a1:09:e8:
         2d:6b:7a:e3:61:c1:00:ea:c4:b8:a3:4e:29:7f:0a:fc:ee:45:
         d7:fa:51:aa:9e:b0:bc:06:5f:7e:3c:c2:75:92:4b:de:00:42:
         c4:ce:c3:65:6b:2a:37:8e:20:da:fc:06:bc:6e:64:49:74:58:
         a0:a7:82:1f:3f:57:b1:3b:c3:9e:62:9e:0d:52:49:e5:81:fb:
         fb:ee:2b:f0:e0:9f:a9:06:3e:69:63:87:db:74:43:75:96:66:
         6c:d5:f8:62:d3:12:62:d0:d0:7d:28:89:70:8b:ca:54:15:51:
         69:fe:85:6d:a9:1a:48:a8:97:0e:5c:88:f1:5b:d1:41:66:0c:
         3d:bd:78:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----