Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
File:                     18R1QD_dkDgYkeWgwyZrR43YyjU.cer (raw, json)
Hash identifier:          39DpzHcf8yzmQKPyhBoGtAcewv/2iuBMiWIlbc/1TIU=
Subject key identifier:   D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194282783152152E3ADFE496D4F99B0B9A3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:54:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50590
                          IP: 46.175.168.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:27:83:15:21:52:e3:ad:fe:49:6d:4f:99:b0:b9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:54:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:27:7f:ce:5f:ea:70:a4:1a:c9:44:00:af:
                    73:4a:cb:ee:0f:06:09:e7:5d:b4:44:8b:8e:d2:90:
                    de:f5:09:48:53:af:a0:7d:33:64:a5:1e:68:a2:d5:
                    5b:33:58:71:bb:95:00:c7:44:57:91:7d:93:bc:14:
                    0c:5b:84:b7:ee:d6:f3:c8:22:40:1e:d4:37:7c:bc:
                    20:7c:18:d2:35:7e:04:2a:b5:49:65:19:f5:c2:80:
                    36:91:de:8c:a6:9a:b5:5a:4b:48:1e:9c:05:ea:07:
                    e8:6a:49:62:62:00:2d:0d:9e:42:51:b9:d1:ee:3e:
                    22:a7:58:fc:cb:31:46:e2:40:ef:af:99:f6:67:d5:
                    66:48:98:ac:01:b9:a9:35:62:5e:6f:ea:7c:b6:77:
                    1d:06:83:17:e7:19:b8:15:38:e1:75:a8:6d:e4:70:
                    71:4a:dd:11:74:ce:b3:46:7b:c5:db:ab:b1:99:e6:
                    6a:f2:ca:32:f7:d1:e8:31:ff:c8:00:df:ff:f4:ae:
                    b7:e7:b3:de:fd:91:ac:44:e6:f8:45:44:09:c5:6f:
                    c7:43:38:c2:3c:e0:77:66:3a:c4:6d:8a:0f:89:7a:
                    d9:2c:0e:fe:f2:d5:28:76:85:fc:6f:62:8a:3d:69:
                    73:18:89:fc:4d:72:ef:6d:8a:24:fb:c0:eb:72:96:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.168.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50590

    Signature Algorithm: sha256WithRSAEncryption
         20:13:97:44:6d:72:90:c1:a4:6d:cf:e3:38:71:39:5f:56:23:
         97:e0:4f:f8:a6:a4:b8:58:65:5f:fc:90:83:af:bc:9e:76:f2:
         5d:9a:7a:5c:34:a2:1d:66:e4:4c:b4:84:a0:29:6b:c1:67:71:
         06:1f:14:bd:09:f3:11:7d:25:4c:52:2d:94:5d:a8:14:fb:02:
         99:2f:e4:9c:a1:36:27:5e:ea:9a:7b:28:f7:a1:85:c4:8d:2a:
         10:e7:4a:95:a7:21:52:a8:7f:3a:0c:ad:d1:dc:11:9b:b1:bf:
         31:38:23:6a:bd:20:55:c7:9a:fe:3e:73:30:0c:38:b1:48:b0:
         f7:17:34:e9:41:84:e5:e7:70:e6:20:bd:06:45:4b:b7:1e:9b:
         9d:08:8e:10:c8:67:b8:60:4c:da:35:61:45:34:5a:6f:ef:fd:
         ce:ca:32:e5:e4:af:7f:06:41:54:97:54:f1:0e:fb:24:48:8c:
         85:d6:7f:ab:16:36:66:ef:8b:2f:04:08:23:34:18:40:73:14:
         07:8e:ec:0e:e0:f7:b6:b3:dd:f9:93:06:3a:58:e3:77:a5:f9:
         fb:ca:53:95:d7:21:cb:b2:63:b7:0a:f9:55:b3:2a:f6:21:1c:
         f6:2a:78:49:7c:f9:0c:24:13:34:e6:f0:e2:ff:bd:c5:d0:91:
         6e:7e:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----