Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
File:                     20iBY9r1DbZG3k3yTTTLrJk_RX8.cer (raw, json)
Hash identifier:          snvMQ0I8Y0Ou+/IcHWoQDOwt/5H2QhNVXBPWFMwKqOM=
Subject key identifier:   DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C31C66AF067BE8D6FCCD6D8A45E08
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203444
                          IP: 185.134.200.0/22
                          IP: 2a03:a4a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:31:c6:6a:f0:67:be:8d:6f:cc:d6:d8:a4:5e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=db488163daf50db646de4df24d34cbac993f457f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ad:a0:1c:69:a7:ae:d5:7f:3d:fc:6c:19:b4:
                    11:93:42:3c:cf:93:de:80:92:b6:f1:76:0e:cb:a8:
                    6b:f6:65:3a:e7:87:ea:87:a9:ef:2f:82:be:14:29:
                    be:ed:ea:b0:5b:92:d1:47:ba:75:9b:d7:8e:5e:2c:
                    35:68:86:d4:30:8f:a2:27:4e:60:a8:05:1e:30:62:
                    81:d1:25:56:ea:94:1e:d1:e4:6c:9e:3a:45:6c:40:
                    4b:ec:68:b7:03:46:2a:d0:75:9a:4d:7c:d5:24:74:
                    bf:5b:42:33:eb:de:4c:de:1e:34:82:81:ac:de:8e:
                    47:4a:f2:c0:0b:4d:bc:00:2e:74:1d:ca:c0:da:f2:
                    c7:d3:b5:52:05:87:7d:6b:17:b3:c2:be:e0:e4:69:
                    bf:3b:88:4c:81:7e:03:d7:a8:59:af:ca:4e:e7:44:
                    56:53:38:5e:4e:33:67:4f:11:6e:e1:53:73:a8:d0:
                    1a:a6:c7:11:c1:41:fa:39:4b:a1:9a:4b:5c:18:4c:
                    92:92:35:44:da:bf:5e:b5:58:00:4c:93:a4:4e:8e:
                    6a:f5:0f:6c:42:3e:18:2c:51:e7:23:16:cd:36:ec:
                    01:0a:3a:ce:a9:ec:b8:17:30:b6:b2:e9:d7:83:f2:
                    60:79:ac:58:f0:67:8a:84:3d:c5:cd:14:4d:65:9c:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.200.0/22
                IPv6:
                  2a03:a4a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203444

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:bd:cf:bd:94:83:a4:a1:75:4a:61:83:b6:85:54:5b:f9:
         9d:b1:72:da:47:1a:f3:7d:91:d3:35:bf:cc:30:63:36:76:3c:
         a8:2b:0a:f5:82:68:ea:32:af:f1:29:2d:a8:9c:8a:d1:52:be:
         0a:36:a5:c6:64:79:93:6e:27:e6:79:cd:42:c8:82:85:8e:f0:
         04:e3:b6:a5:81:b5:ef:28:ba:b4:6d:55:c9:1e:d4:2c:d7:ef:
         9d:90:c1:e2:7b:5b:5f:b3:a7:24:9a:be:32:b5:c1:eb:af:a3:
         7d:49:05:30:22:f1:d7:e2:53:bb:86:e5:75:18:a2:e0:3e:e6:
         0e:db:77:0f:d6:50:4e:6f:f5:a5:4f:ea:12:fc:16:52:66:69:
         bb:5b:61:16:7c:66:8c:38:c9:31:2a:cc:a3:b0:9e:be:9b:62:
         db:4a:ea:b4:88:f6:cc:c5:89:5b:37:80:f1:ae:af:bc:d7:8f:
         98:30:63:6c:5b:b5:43:2c:6b:d0:77:d5:b8:6f:12:b8:5e:3a:
         9b:c3:82:e3:8d:bd:99:db:9b:2e:56:fe:e4:6b:3d:43:1f:dd:
         58:eb:bd:f6:db:af:a6:49:43:b9:72:06:c8:a1:e7:1f:20:09:
         6e:3d:a3:fb:83:2e:e0:7b:59:26:5b:77:b0:05:02:d0:e2:34:
         75:1f:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----