Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
File:                     Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer (raw, json)
Hash identifier:          hUdE1nbE1FwviVvK4vbvMK/8gjwNWUmohQlRxgJ4e20=
Subject key identifier:   05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D945EA2CF53E37C6C5B448C5DCAF77
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202730
                          IP: 185.142.112.0/24
                          IP: 2a07:2d00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:45:ea:2c:f5:3e:37:c6:c5:b4:48:c5:dc:af:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:6c:06:d9:a2:22:d9:8b:28:71:26:f6:a4:
                    3c:bc:b4:09:c9:bb:79:60:87:be:66:65:15:32:47:
                    ef:e4:55:ac:00:7d:b9:53:97:48:b5:98:4a:e9:6b:
                    d9:16:ff:33:5d:18:f3:d2:e6:a8:f8:20:57:bb:14:
                    17:49:68:60:cd:3b:43:b5:aa:95:ad:6e:c2:16:9d:
                    1e:06:e8:c2:d0:44:05:a6:29:11:81:02:34:6f:a0:
                    8d:ea:2b:1c:09:a8:f3:39:50:94:4f:d2:7e:02:b6:
                    65:24:bf:a7:c1:37:43:58:d7:8c:72:6b:95:de:fd:
                    03:dc:dd:a7:11:c6:33:fd:9b:d9:88:04:de:02:70:
                    79:e9:3a:ed:31:2c:f0:d7:46:fb:a8:c4:d8:f1:e1:
                    f3:61:0e:bb:d5:69:ac:46:96:49:d8:66:08:d4:ac:
                    b3:c8:d9:9c:1b:66:6e:ab:a0:df:3d:61:16:c6:6d:
                    f1:c3:2e:92:60:60:24:15:cf:a5:0c:00:11:3f:1d:
                    52:0a:a1:6a:77:c2:78:38:4f:9c:81:43:f6:b5:4f:
                    ed:01:41:d9:64:d9:e1:71:c7:23:d7:03:83:4c:b2:
                    51:76:ce:1a:b5:43:1b:60:98:19:3f:27:6b:0c:6e:
                    c3:27:37:28:84:41:d4:73:04:f2:44:47:b5:93:96:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.112.0/24
                IPv6:
                  2a07:2d00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202730

    Signature Algorithm: sha256WithRSAEncryption
         98:ff:3f:6d:09:c3:10:d9:3a:5b:33:d6:bf:11:0e:16:bb:f7:
         ac:10:28:31:1b:60:b3:bd:6a:78:8b:16:7b:b4:59:59:ff:1f:
         52:ef:f4:32:04:61:af:ce:0c:53:ea:cd:ad:44:f4:08:30:9b:
         40:37:d0:cb:85:4e:dc:3d:77:df:04:44:0d:05:b7:7d:9a:f0:
         94:c0:07:e5:b6:0a:1d:15:5f:8f:e8:7b:5c:8e:08:fe:f6:9b:
         4d:8c:0e:f9:cc:23:9f:1b:57:18:5e:64:93:8a:ae:83:ea:42:
         be:db:78:d8:72:a4:78:5a:c4:d3:80:33:72:49:91:16:27:c7:
         28:15:9f:f8:25:b6:2b:df:83:fb:e7:4a:0c:56:ac:b8:3d:09:
         51:c0:70:b0:7e:a9:89:85:f2:6e:6d:1f:33:0a:4d:0e:09:a7:
         89:53:df:37:69:60:8a:0f:08:d6:e0:a6:ac:b7:f5:ac:7e:05:
         ec:0c:30:fb:89:bb:4b:c8:4a:4f:e6:f0:f5:7f:30:c4:bf:96:
         16:b5:85:4e:10:d0:52:3d:bb:47:24:b4:bc:08:f5:52:fb:24:
         87:0b:96:a4:86:07:2b:a1:d0:97:cd:c3:a7:64:9c:a7:ca:e2:
         fc:05:30:5f:21:6f:84:0c:84:2f:a6:29:8c:99:32:6d:20:9e:
         f5:76:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----