Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
File:                     AdULmAcVDaOWMiudTc_A0vsrZSA.cer (raw, json)
Hash identifier:          zjBNtrEHHb1GMxO18rfFy/uhReu3lHu1gEeG+4Kp4xU=
Subject key identifier:   01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3FAC85B1544D411B073020C4DD159
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211109
                          IP: 85.209.236.0/22
                          IP: 2a09:a1c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:fa:c8:5b:15:44:d4:11:b0:73:02:0c:4d:d1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bd:20:da:a5:92:98:a2:6b:54:04:86:82:09:
                    05:46:7e:95:98:1f:d7:9e:b7:f8:e8:37:8e:79:d7:
                    f7:2e:91:fe:7c:d9:20:51:d4:95:e3:59:c4:c3:31:
                    80:ea:12:fe:e0:c6:ff:5f:c3:36:64:a2:f3:0d:24:
                    e3:8c:87:10:c1:fb:50:49:1b:f0:1c:a2:aa:a2:3f:
                    3f:b5:41:da:e5:4a:21:3f:88:43:07:61:69:e5:c6:
                    26:d0:fe:f5:6e:08:1f:c0:fb:a4:b0:9f:53:aa:a4:
                    88:2a:3b:2b:90:d8:f1:8a:cb:75:7f:f5:72:28:33:
                    86:62:7b:98:c8:a2:3c:30:90:ae:91:37:ac:47:a3:
                    3c:ea:03:15:99:2c:ab:ce:de:69:9d:a7:0b:ef:9f:
                    00:c8:18:dc:a7:de:47:cd:50:9f:5b:64:ae:db:69:
                    07:48:d7:27:26:ef:47:61:12:78:b5:1a:3b:3a:09:
                    e1:cc:c4:df:a2:52:20:09:87:9e:5a:bc:7c:c1:22:
                    52:58:8d:d2:f5:78:f9:c3:05:5c:56:a6:11:0c:11:
                    de:52:5a:24:16:51:71:26:51:d2:a1:5f:60:5e:e3:
                    3e:34:2a:4c:e0:40:44:98:ec:8c:a2:21:96:c1:c2:
                    a2:5f:95:87:6c:3e:fd:d3:49:b9:6f:7d:48:ef:03:
                    41:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.236.0/22
                IPv6:
                  2a09:a1c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211109

    Signature Algorithm: sha256WithRSAEncryption
         1e:eb:e4:98:47:76:0e:98:64:d7:0e:90:1f:0c:8c:55:0f:bb:
         60:37:25:0f:d5:a9:4f:69:39:c3:73:42:11:58:23:cc:29:bc:
         30:50:b7:e0:a8:21:2b:dd:75:49:c6:cd:bc:77:48:99:a5:fb:
         a0:eb:62:74:0c:24:1e:46:83:a6:09:21:20:38:63:b8:ef:44:
         1a:56:e3:3c:89:37:7e:b8:f4:fe:79:22:a9:05:48:8f:92:a6:
         d4:90:4b:60:69:ee:89:9d:fc:53:89:40:5f:83:b1:48:44:66:
         1c:11:9a:08:1e:ba:73:6a:70:9b:ad:1e:5d:7e:c4:67:2b:33:
         70:53:d1:b8:1a:6e:f2:71:72:d3:81:ec:5f:b5:21:8b:56:e2:
         b8:19:9f:12:97:29:19:2e:8a:1c:fd:3a:4f:db:73:3f:db:38:
         61:a7:5e:af:fe:c0:13:84:e4:c7:23:26:7c:55:32:90:6b:63:
         89:8f:70:23:4a:2d:34:a4:94:da:48:0e:c4:95:10:9f:28:c3:
         3e:39:6a:58:58:2b:a4:51:c5:4b:5e:07:eb:c0:2b:4a:2d:8b:
         52:a8:47:83:45:29:46:a9:60:d7:6d:86:cd:6e:9a:ba:0c:f9:
         ef:87:f4:76:82:a8:f6:86:66:b9:8b:b0:63:c4:c0:fd:0d:25:
         8e:24:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----