Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
File:                     1dHNR6U-9X67VnvIgq0phvqsXw0.cer (raw, json)
Hash identifier:          xqL/4JQ+gbd9LG1mUQuuoZ2kdAQooNQP+tns3r/XQc0=
Subject key identifier:   D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC17D406F8E410E7F256BBCE319D16
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201916
                          AS: 212213
                          IP: 185.59.216.0 -- 185.59.218.255
                          IP: 2a02:6e60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:17:d4:06:f8:e4:10:e7:f2:56:bb:ce:31:9d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:16:76:ea:4b:1f:f8:18:a3:d7:59:ac:1e:
                    14:8e:40:16:26:63:7a:fc:3c:f4:8f:66:f0:64:a1:
                    ee:fb:f9:c3:d9:81:78:39:ce:44:e3:cb:1c:dc:01:
                    f6:e0:2f:a1:8b:a2:8f:fa:16:13:b1:5a:f6:aa:1a:
                    81:03:28:d0:eb:10:c0:52:7a:09:e4:db:ee:18:70:
                    1f:50:2a:eb:9a:8d:bf:17:2a:e2:cb:4e:b8:4b:1f:
                    66:78:a4:0d:04:24:a8:e2:33:bf:d3:06:40:2e:35:
                    32:82:cf:13:a9:6a:8a:19:e6:97:b2:c6:96:19:02:
                    92:b5:62:c3:c0:27:12:a4:16:cd:66:7b:c1:b4:15:
                    bb:f0:a8:f3:d1:8a:35:a2:c5:87:0f:55:80:a2:df:
                    ec:27:7a:1b:83:e3:ea:09:f9:c4:0d:de:9c:5d:1e:
                    00:95:e0:e3:94:67:6a:ad:23:e1:92:e6:54:26:96:
                    ee:58:94:f6:2b:b3:f5:db:16:fb:62:af:0c:8e:30:
                    87:a6:2a:8b:a0:58:d3:13:c3:ff:8c:50:72:d2:27:
                    f2:a0:4c:ee:c4:ec:98:37:01:c3:6a:c6:60:21:f8:
                    09:65:92:d8:02:f8:ed:90:89:8e:42:2a:e7:36:d0:
                    12:44:22:3b:7b:ec:2d:e9:ad:63:42:4d:ea:51:b7:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.59.216.0-185.59.218.255
                IPv6:
                  2a02:6e60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201916
                  212213

    Signature Algorithm: sha256WithRSAEncryption
         4d:a0:22:e8:0d:eb:9e:41:f4:1d:9c:20:a0:1b:c4:1e:e4:09:
         f5:e3:b6:ca:ac:82:1d:66:82:a7:57:1f:dd:90:54:0b:b7:4d:
         76:5e:12:0f:5f:05:bb:1c:5c:22:8d:a7:80:b1:9a:a2:6f:bd:
         5b:a9:ee:0d:b5:98:4d:cd:0c:70:45:c9:86:07:d2:46:4d:ad:
         cb:b9:fd:d6:3e:12:7d:b2:fe:ad:bb:e7:08:09:89:87:5a:cd:
         4c:47:72:35:ed:d4:1a:ef:2e:f9:cd:b7:69:58:a4:83:f8:46:
         08:6c:4e:4c:50:b0:78:e3:ef:d3:6f:e9:82:75:06:a5:83:41:
         f2:19:ac:69:2c:b2:ca:3b:27:39:af:d8:b2:a3:8c:20:e4:01:
         8f:8b:21:81:54:ff:15:15:da:24:5a:c2:90:68:fa:ef:b5:50:
         7b:09:e8:a4:86:52:d6:2b:35:a4:59:14:b0:8e:d2:70:f2:64:
         e5:f2:92:1f:04:b6:cb:b9:3d:36:2d:08:44:c2:ee:4b:38:2a:
         bb:b6:57:be:d7:27:4e:04:53:c5:fb:35:e7:20:39:58:c0:b5:
         fc:c1:e1:ce:55:58:37:39:f2:2f:08:94:d8:88:f6:45:1b:c3:
         da:0c:32:be:b5:3c:9d:df:98:de:6a:f7:67:7d:04:d3:e3:df:
         c3:7d:9f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----