Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
File:                     7dUb8eKlMAC8IwYFYPLMCznUlu8.cer (raw, json)
Hash identifier:          Zf3EeStmKmby55qTi5GLP3ObLBzfy8MN78L6Cmr6Huw=
Subject key identifier:   ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FBD2EB538D36FDF7B5F6A01322C028
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204503
                          IP: 185.143.216.0/22
                          IP: 2a07:3880::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:d2:eb:53:8d:36:fd:f7:b5:f6:a0:13:22:c0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3b:ca:1e:2a:f6:c7:b5:c8:a1:4b:d8:c4:0f:
                    9d:8c:b1:37:50:29:bb:10:50:da:10:d0:20:11:a8:
                    f0:16:1c:23:a1:c4:65:b1:9a:10:f4:b5:ab:bf:78:
                    d6:90:6b:4b:8e:d9:a1:1c:c2:48:f8:37:20:62:58:
                    d8:0a:92:5f:7d:c1:c8:f9:c7:3f:da:41:69:87:7c:
                    7c:2e:dd:7d:e2:f4:5e:6e:a7:70:e7:7f:59:de:3d:
                    e4:1e:37:f2:17:20:f7:15:c2:f2:85:07:11:af:b1:
                    df:97:9b:ee:0c:a5:1a:f8:0e:20:e0:6c:f6:95:03:
                    8f:8c:0d:00:42:26:bd:bd:0b:66:b7:68:ff:51:57:
                    e0:62:69:b5:95:8e:fa:7e:48:a5:1a:04:bf:d6:d0:
                    37:42:24:c8:29:f7:b3:68:fd:d9:21:2a:7c:10:1f:
                    77:0d:1c:f6:37:48:04:d1:da:e8:5a:2d:8a:d5:a0:
                    96:88:75:2d:c4:00:42:6f:06:f4:78:54:64:2d:89:
                    b6:52:30:ee:ac:0a:5d:05:21:6e:b8:e2:ba:af:28:
                    8e:75:60:df:73:96:eb:48:d0:dd:9b:67:03:41:c2:
                    e2:72:0d:e2:2e:ec:a2:c0:3e:58:b5:be:95:5d:f5:
                    cd:38:d0:62:7d:25:f0:3f:de:c3:8b:43:2d:a9:82:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.216.0/22
                IPv6:
                  2a07:3880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204503

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:98:31:d8:f5:42:48:5e:fa:30:a4:0c:26:d2:39:22:6f:
         33:59:9e:ba:cb:fc:31:a0:89:49:07:90:9f:35:e6:6a:3b:bb:
         d2:b9:aa:56:c4:0e:49:cf:9f:2b:24:aa:fe:e6:c2:2d:1f:2a:
         b1:be:87:cb:18:d5:f6:b0:e7:f2:76:bd:9a:08:a0:d3:ee:ff:
         36:75:91:d7:6a:05:1a:c1:61:c3:3e:e3:a3:3f:41:27:c0:cb:
         52:5b:b5:78:28:b3:b5:73:4c:bb:30:0c:e1:53:60:ad:d8:67:
         39:37:46:a1:a2:41:fd:21:96:a1:5f:50:de:73:35:5c:e2:91:
         16:82:45:81:92:38:98:37:be:05:45:bb:d5:87:29:8c:d9:0b:
         26:f3:7e:e5:67:11:01:7d:2e:6a:0b:4d:d7:50:30:9c:8d:fd:
         43:61:1f:12:5b:ce:2a:49:74:06:d1:7a:6c:e5:dd:56:66:31:
         0b:5e:b0:19:52:61:b3:f7:73:6a:d2:f4:f7:c1:32:74:4e:43:
         c7:94:36:57:9b:fc:b7:b7:2f:ef:a4:df:a3:f9:73:3f:7f:a6:
         e4:75:bd:21:ad:64:d5:26:4e:22:1e:78:71:6e:41:46:ef:6f:
         a1:0d:b7:77:82:11:f0:2c:31:09:0d:31:fe:16:51:7d:79:29:
         f8:ad:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----