Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
File:                     AyudLeU3ELMVjkLyKIkQnixA9Ds.cer (raw, json)
Hash identifier:          ITsNJDwloutswMbXlBuh3B9vyvc9TKweUvX9oLwZWVk=
Subject key identifier:   03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D971AF54A3D979C87CC5D8B6089EAA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210022
                          IP: 185.158.20.0/22
                          IP: 2a0d:ad80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:71:af:54:a3:d9:79:c8:7c:c5:d8:b6:08:9e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=032b9d2de53710b3158e42f22889109e2c40f43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:31:7f:8c:58:5e:a1:92:bd:8e:d3:be:d5:
                    66:02:14:fd:a8:91:83:0b:b5:14:a1:3e:83:ca:95:
                    67:f9:4f:6e:d7:1c:ea:5b:fd:29:ad:7e:49:7e:c6:
                    8d:a6:5e:b8:40:94:8d:a3:0f:97:e8:a0:90:cd:ab:
                    7a:37:4a:03:4e:3b:d1:5a:d4:06:2c:da:f2:bf:5c:
                    ed:09:ef:f9:f0:9f:1e:77:66:51:5f:f2:8e:67:49:
                    9a:6d:3d:5a:80:72:db:82:13:30:eb:b4:98:6e:47:
                    6a:0c:8f:06:31:db:72:a5:22:15:3a:fc:24:ae:80:
                    27:9c:69:c7:53:72:3e:93:54:52:98:22:50:ec:17:
                    a3:d8:ce:f5:a1:c0:e4:98:13:dc:69:19:4c:b6:52:
                    dc:4e:66:90:68:34:71:aa:9d:cc:2b:17:14:0e:9c:
                    a1:38:1a:e5:8c:d2:4d:6e:3d:c4:46:57:b7:c2:bb:
                    a9:a0:17:a8:0a:30:3c:68:fc:e3:de:cc:f1:9c:a3:
                    c5:b7:51:8a:0b:28:d9:38:4e:ed:e6:d3:4c:b8:d9:
                    df:76:8e:73:9a:10:9c:7a:e5:35:09:2a:1b:74:97:
                    4f:94:09:10:8c:97:9d:3d:e1:f4:67:d2:02:24:a9:
                    fc:27:00:63:17:a2:cf:31:30:5d:ae:bb:f7:ac:13:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.158.20.0/22
                IPv6:
                  2a0d:ad80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210022

    Signature Algorithm: sha256WithRSAEncryption
         65:23:45:6e:f0:c8:d9:77:e9:24:b1:68:ca:61:80:ce:28:78:
         d4:0b:a7:36:bb:ad:12:82:07:8d:ae:84:ac:11:6f:8e:d7:16:
         99:d6:39:b2:86:43:42:4e:3f:bb:e4:5d:1b:41:1b:f6:8d:8d:
         3e:be:95:3e:f5:2a:07:74:7d:11:ff:85:89:32:30:15:5d:d4:
         08:86:cb:b2:ee:3f:d1:d5:ce:cb:bc:b2:4f:e3:6b:3d:d4:be:
         71:c6:8d:ce:5e:f2:48:ff:89:12:a8:9d:1d:df:71:3e:6f:d6:
         87:83:83:fe:4d:3b:9f:3a:98:22:ef:2d:55:05:36:3c:45:19:
         7c:ba:1a:5a:ee:d5:7a:83:fa:13:70:98:0d:45:3f:d1:f2:7b:
         d5:a7:62:8c:fe:8e:6c:55:b2:1f:07:a1:44:75:16:bd:d4:fa:
         e5:8a:29:e2:79:cf:1f:a3:01:49:90:78:5a:2b:be:26:4f:eb:
         4a:87:51:ba:88:57:98:43:5f:82:62:55:97:49:1a:be:6a:35:
         64:4f:31:04:ea:67:26:85:b6:bb:36:d2:d6:5c:12:dc:19:b4:
         15:0f:9d:3b:93:e9:b7:af:e2:b9:d4:59:07:91:a0:20:49:a2:
         47:83:77:80:b8:63:97:e9:10:46:fe:37:80:cc:27:6d:00:cd:
         8f:08:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----