Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
File:                     3tsgAwkB_y3069H0nkiRyyj-BzA.cer (raw, json)
Hash identifier:          IIqREo2pBVwZBMgVfYgspQ9W88sdIOwxFK/hU1AeDZY=
Subject key identifier:   DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C14665BDC997A3B5D546A1CB95785
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60847
                          IP: 91.244.227.0/24
                          IP: 185.92.12.0/22
                          IP: 2a05:f000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:14:66:5b:dc:99:7a:3b:5d:54:6a:1c:b9:57:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:4b:ae:6b:eb:11:f8:49:c5:05:47:86:41:
                    0a:da:74:ca:02:25:fe:83:7c:66:de:06:e1:fe:68:
                    45:0f:8b:12:93:89:c3:85:8d:4e:73:ce:c0:03:29:
                    50:3c:1f:be:3c:7c:a7:2a:01:fc:d6:b7:d2:f7:93:
                    55:bf:71:3a:83:f6:9d:f2:9c:55:5d:5c:06:ea:9b:
                    b2:e9:1e:82:a7:3c:ff:30:c3:8b:83:4b:33:4f:f9:
                    eb:45:1e:e7:94:59:f2:1d:74:f4:dc:23:7f:d7:09:
                    f9:a7:9d:3d:80:49:50:aa:da:2d:c4:13:37:a7:c5:
                    7d:a8:e3:7c:8a:83:83:77:f4:af:6b:49:25:08:9e:
                    41:44:e7:b0:a4:90:1b:bb:b2:92:15:84:6e:e0:f2:
                    dc:0c:73:bf:15:3c:1a:87:c3:d0:a3:b3:0c:24:f6:
                    49:70:4c:d4:57:06:5d:65:cb:1e:74:1c:08:06:55:
                    0c:76:63:c1:b9:90:b0:de:a2:c1:12:4c:f3:c4:75:
                    07:fe:b7:86:02:ee:01:30:9b:b5:89:f9:9b:57:9a:
                    fa:22:22:e0:6c:f5:4f:a8:9b:c5:58:8f:e7:f0:4d:
                    e4:f8:fd:e8:1d:00:7f:ee:17:fa:26:10:07:9d:36:
                    0e:c3:f3:32:fb:33:91:6e:65:45:e8:84:be:39:26:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.227.0/24
                  185.92.12.0/22
                IPv6:
                  2a05:f000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60847

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:2a:86:e2:d5:32:89:83:d6:ea:a3:e4:e0:93:41:5b:26:
         a7:0e:81:62:bd:b3:8f:00:d5:28:af:af:23:a1:dd:fb:ee:67:
         49:b5:9b:1e:c0:96:90:cf:12:ec:97:6f:5b:c2:de:e8:a4:4c:
         fa:50:71:f7:22:bb:9b:ab:aa:96:8f:98:8b:45:a6:12:e9:43:
         40:c4:a4:3b:43:04:6e:73:14:53:de:9a:62:e0:e0:8b:41:11:
         55:6a:8c:0e:e6:50:1c:07:c3:2c:6c:49:66:b5:ab:57:f7:06:
         2f:69:f5:74:11:e9:36:8d:2c:e8:9f:0e:76:8f:46:cf:69:ef:
         71:8c:3f:39:95:77:70:8c:b5:fd:3a:55:3c:25:c5:71:28:8e:
         c1:cc:9d:d4:8b:cd:98:c0:04:ff:22:40:07:87:47:26:b4:bb:
         49:70:c5:e0:98:58:31:f0:f4:d9:8a:d7:4e:37:00:94:18:61:
         e2:88:07:8d:df:3f:87:61:bf:80:00:a9:0d:7c:3e:e5:4f:4a:
         1b:85:f1:93:85:a0:1e:0b:5b:7e:0d:12:f4:ea:30:c2:b2:de:
         65:e9:b7:02:e0:a8:c3:1d:83:d1:a4:59:bd:9b:7d:82:aa:7f:
         16:e1:64:f6:5c:64:a5:4e:4a:20:38:56:b5:34:6b:13:d8:77:
         64:bd:30:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----