Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
File:                     AtDoiIXvSLIMh7dv2F1C5us9cYM.cer (raw, json)
Hash identifier:          V5MTZE0s36w8IrApP1OVvfgk7zbUoqWZ9Fc2KjuIAU0=
Subject key identifier:   02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B60B3113775EC2CCEA170F7D8A26F0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41942
                          IP: 46.31.0.0/21
                          IP: 91.102.200.0/21
                          IP: 2a00:a5e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:0b:31:13:77:5e:c2:cc:ea:17:0f:7d:8a:26:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:44:87:f0:cb:f9:f1:bf:94:c8:f7:36:66:
                    fc:4c:90:9b:fb:ed:7d:89:85:b2:ce:9c:28:4c:33:
                    74:29:82:46:f4:20:bd:ef:de:5a:8b:c3:fd:e0:d5:
                    ba:80:51:e9:0f:38:c0:d5:2d:39:bd:2e:da:36:a1:
                    24:fd:87:e5:96:4e:39:a6:f6:b7:33:c3:4b:83:2c:
                    68:27:43:29:d6:91:ad:ae:ab:29:bd:5d:ce:be:cb:
                    06:f6:c4:d6:fd:8d:6a:d1:e2:18:a8:14:0d:2e:be:
                    dd:02:5e:4c:e6:c5:76:0c:e0:19:a7:7d:1f:95:07:
                    ed:70:82:4d:82:d6:da:4c:e6:9b:d0:48:ff:eb:c5:
                    c3:55:18:de:07:3b:a7:d4:cf:f3:1e:e1:03:b0:bb:
                    24:7c:fc:c3:00:19:13:aa:fb:1a:12:90:d0:7f:ad:
                    20:4c:06:08:de:29:1e:69:c0:21:49:17:a7:4c:a5:
                    84:1e:ab:af:f4:5e:83:ad:80:bf:62:23:a9:0e:ce:
                    5f:35:06:c9:38:ad:db:9e:db:1f:b8:4e:2f:c0:40:
                    81:63:a4:0a:b9:d8:33:e6:d0:39:41:23:c7:3d:a6:
                    68:61:b2:5d:c7:ce:e1:2f:a0:94:15:aa:cf:b4:07:
                    c9:ef:6d:01:f1:4d:c9:e1:d7:a3:44:64:69:17:4c:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.0.0/21
                  91.102.200.0/21
                IPv6:
                  2a00:a5e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41942

    Signature Algorithm: sha256WithRSAEncryption
         43:43:ce:df:f1:60:de:c9:1e:4c:54:89:b3:b4:3c:8b:af:5d:
         6e:a6:b3:08:8d:0d:fa:66:c1:1b:5c:90:19:32:ca:91:7f:30:
         7a:fa:3b:89:1c:ba:c9:6d:fb:a7:33:b9:b6:83:c8:76:44:7b:
         83:3c:e8:25:c0:a3:d0:25:9f:d4:8d:6b:e5:6c:e0:a0:bf:dc:
         6c:88:fd:28:5f:e2:bf:bb:a5:59:ed:3a:9c:60:0e:bb:be:b4:
         5b:bc:7c:5f:9a:bf:75:ac:f8:db:6b:89:ed:d2:d3:83:aa:71:
         e0:35:4b:c2:c9:01:20:1a:96:4e:aa:bb:7a:4c:c6:91:e8:fd:
         3c:f8:16:03:b4:34:7d:92:4c:42:4c:e2:23:7b:cd:be:ba:d9:
         be:5d:aa:b5:ce:21:ed:aa:96:df:a2:95:5b:cc:f4:a5:24:b8:
         59:28:b0:e6:5e:e7:e1:d3:aa:c4:0f:c2:8b:4b:0f:26:f5:42:
         c2:71:36:6d:aa:a5:7a:3d:e4:e6:93:6d:8a:57:5a:71:11:67:
         90:6a:bf:80:83:53:d3:c7:aa:46:69:5d:a0:7d:90:a7:91:31:
         df:e6:6c:25:09:71:10:7a:7b:ad:fa:11:6a:40:ff:76:bf:92:
         2c:19:14:1f:7a:25:8e:51:3c:89:0e:3f:df:eb:6a:5e:92:cf:
         c2:30:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----