Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
File:                     0rvJBVXW0NNDK6u5W2DN7upYD1g.cer (raw, json)
Hash identifier:          rk8BfgusKVf24+B2jijEYnFNKFnfc8wfGzv2g6mcJMw=
Subject key identifier:   D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA81D0EA272CCF1E6B6D64C319B859
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213025
                          IP: 91.200.179.0/24
                          IP: 2a0a:d700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:81:d0:ea:27:2c:cf:1e:6b:6d:64:c3:19:b8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:79:71:e3:dc:9e:e7:70:b9:87:07:31:fc:
                    3f:91:5a:08:f2:fa:f9:44:0c:fe:37:06:1e:32:1b:
                    a1:6b:ec:96:c9:aa:1b:14:5c:5e:2b:36:b9:1f:06:
                    ef:aa:75:cc:5e:04:48:20:8c:50:4a:bc:7d:20:73:
                    a6:a5:6a:af:ad:42:68:28:cd:6b:35:df:2d:c6:4f:
                    a6:ad:b1:3e:28:64:e1:8d:e4:78:14:27:24:77:bd:
                    de:d1:af:22:1c:aa:53:73:0e:05:c7:9f:74:4f:d7:
                    50:54:69:a6:1e:0c:1d:7d:35:ac:b8:fc:45:59:70:
                    26:ad:a5:4d:a7:63:ea:92:50:8c:5b:37:e6:3c:07:
                    d1:45:71:53:42:74:e4:12:cf:5e:8c:56:5f:ee:28:
                    bb:58:c8:9d:93:98:c6:ae:07:d5:7a:6b:47:38:6e:
                    2b:dd:37:59:93:5d:d8:2e:1e:ca:23:d6:03:24:90:
                    ce:7c:9a:2c:04:8c:eb:97:c0:a2:b6:90:a8:2a:f9:
                    1a:7f:3e:14:fe:8f:9d:11:34:41:ce:b3:6c:2b:16:
                    49:df:a6:28:b3:2b:2f:21:09:dd:a9:bc:57:0d:96:
                    7a:42:17:e5:c9:02:5c:cf:0f:22:65:06:98:d6:4c:
                    8f:a7:fc:7f:77:9d:89:3a:ee:e3:56:e5:32:93:97:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.200.179.0/24
                IPv6:
                  2a0a:d700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213025

    Signature Algorithm: sha256WithRSAEncryption
         11:94:b2:b4:2e:ac:42:44:c6:7d:be:c1:dc:a1:15:c9:cf:1b:
         3d:ec:23:84:f0:5d:d1:1c:eb:f1:61:c9:18:ac:c7:96:63:56:
         e4:1c:8d:75:ff:14:82:78:0a:86:3e:7f:eb:08:3f:7e:ca:d8:
         b3:5f:52:90:c8:28:67:67:4f:dd:3a:b1:f2:9e:1f:6f:19:eb:
         e8:56:ae:59:59:80:44:15:55:05:9c:e7:12:a1:b9:6b:48:d1:
         c4:ca:13:cd:b3:0b:14:c4:9e:d7:68:fb:6d:71:74:4c:14:4d:
         03:44:0f:ee:ea:17:c2:b5:32:6b:56:af:a4:be:d0:cd:a2:28:
         50:3c:b4:62:b9:5f:b1:ce:ef:c1:3e:57:84:ff:19:3f:7e:04:
         c3:a8:24:30:79:e3:c5:98:4a:d4:ff:4d:27:b9:dd:c1:22:73:
         3b:e6:e4:7b:63:59:d3:7d:48:5d:44:26:c3:90:73:29:81:48:
         c7:41:0b:1a:56:9b:1c:0e:de:2d:12:26:83:44:c6:42:67:27:
         d0:e2:31:0f:9a:2b:c2:df:b0:f6:80:f6:ed:9b:39:8d:47:07:
         17:09:6e:7b:18:6b:a1:1b:39:87:bb:40:0f:cb:ae:86:c2:6c:
         57:ce:28:45:6e:78:58:bf:49:fc:60:14:0a:4e:db:64:61:e6:
         18:62:f7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----