Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer (raw, json)
Hash identifier:          1410tq6rD98Cwyhfn5XFUAfZaAgmFkB9NvXsp9OKYLI=
Subject key identifier:   D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3BCF631516CE0EB52533F0A0E60B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203413
                          IP: 185.135.160.0/22
                          IP: 2a06:f600::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:bc:f6:31:51:6c:e0:eb:52:53:3f:0a:0e:60:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:c9:23:aa:08:18:6c:10:40:54:74:e2:63:
                    f9:5b:84:c1:a3:96:a5:17:34:1b:41:b5:28:79:84:
                    12:33:f0:49:b3:90:22:1d:f3:ef:e9:fd:70:9b:fc:
                    6f:7b:1c:60:99:bd:a4:fb:55:60:88:64:8d:f9:5f:
                    64:c4:29:02:63:8f:15:39:f0:35:7f:13:34:bf:3d:
                    81:61:db:24:9b:ec:fd:66:c2:16:80:ab:f3:c6:23:
                    9f:a0:66:30:b6:3b:ed:53:c6:41:20:5e:39:af:4a:
                    d4:f9:f9:61:ba:5d:d8:bd:ff:27:27:47:82:a0:38:
                    86:cf:18:0a:8c:4d:45:ec:25:ef:1d:b0:09:f9:61:
                    98:1a:ed:9d:18:81:10:84:9c:ec:18:77:30:5e:a2:
                    9d:56:3e:82:ad:dd:b1:4c:ec:58:58:19:00:68:04:
                    c1:28:e9:5b:a1:3c:0a:23:61:ce:5b:ef:fc:89:20:
                    8c:f3:d8:80:34:ed:1c:a7:f4:fd:8b:75:5e:33:51:
                    9c:b4:99:ff:21:65:49:b4:a6:83:f9:9e:52:44:4c:
                    50:1b:37:67:eb:66:ea:2a:40:01:d3:d9:f6:5e:98:
                    72:b2:b6:e5:82:5a:c5:4f:2e:a8:56:d6:50:df:23:
                    98:da:97:0a:0a:91:9a:d7:09:4a:2c:e7:e6:1d:08:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.160.0/22
                IPv6:
                  2a06:f600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203413

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:a8:a7:3d:e2:80:3c:f2:85:31:3c:b8:3d:de:1d:d5:c1:
         53:37:d8:ca:9f:04:7b:91:07:2d:43:a9:25:4a:07:ed:56:2a:
         49:86:36:71:36:4f:f4:4d:24:15:b9:c8:76:45:22:fe:55:18:
         b5:0e:75:e1:aa:52:e1:d3:a1:32:2b:d7:6a:5e:49:ce:d4:17:
         22:e7:25:84:a9:9f:90:7c:d9:1c:79:26:db:70:14:e9:24:4f:
         80:e6:54:c2:6a:f1:6e:95:65:25:21:d4:52:b4:55:c6:7e:15:
         f9:10:61:9b:ca:57:63:32:0d:72:44:a1:5f:f7:4c:63:12:00:
         e1:00:0f:18:15:2a:d1:00:3a:b6:76:74:d3:8f:db:a1:99:aa:
         f6:9c:c4:e7:0b:eb:cd:41:dc:15:49:41:df:3c:ae:a8:c8:d4:
         0a:ab:4f:c7:98:a3:4e:f5:bb:95:b9:cd:f8:3d:04:72:3f:11:
         82:ba:be:75:0c:cb:ad:cf:1d:4c:0a:72:e3:7d:c0:51:f6:0e:
         f5:ce:0f:00:02:ae:57:1d:ce:1e:d2:19:93:c2:e8:57:42:d1:
         81:2c:3c:91:32:8c:a0:fa:9c:61:54:e8:fd:e9:85:5b:1f:ba:
         a1:9b:fc:32:2d:2e:ea:30:4e:a3:ed:ab:34:e2:74:ab:68:fe:
         e8:44:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----