Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
File:                     BbiIxzyL2SyrKy9GX-Z17h9unWA.cer (raw, json)
Hash identifier:          awtw/vpE1PfQC2FoQqttgweWqk3gDmmza+4IoVEBMjw=
Subject key identifier:   05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01959440B2C840DD27336419ECF0E1CF2E82
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 14 Mar 2025 10:43:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199320
                          IP: 93.180.136.0/23
                          IP: 2a01:9a40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:94:40:b2:c8:40:dd:27:33:64:19:ec:f0:e1:cf:2e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 14 10:43:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:f1:2e:85:24:c8:79:9f:18:03:35:6f:5f:
                    02:65:48:09:2e:ee:3d:a3:e0:be:b5:2b:a9:de:5d:
                    03:d8:8d:48:43:c0:a7:46:11:98:12:78:1a:ae:7e:
                    34:72:8f:6e:fd:47:bf:95:87:dd:e9:50:9e:57:f1:
                    bd:35:13:01:f7:44:6e:29:cb:0c:96:56:a8:04:92:
                    99:27:5e:e2:6e:3e:18:ea:fb:b7:ff:31:99:35:0c:
                    88:95:f7:cc:dd:45:af:b3:47:b3:74:67:fb:55:51:
                    2e:d9:ca:7f:6a:3b:86:c8:a2:2a:dc:03:ba:5b:c6:
                    b1:aa:13:97:6f:04:9d:6a:6d:32:b4:99:b2:72:86:
                    59:f0:ba:90:ce:64:08:f2:80:1e:a7:3c:85:81:8f:
                    80:f0:d0:b3:d9:c5:f1:86:51:b0:d2:89:1a:10:07:
                    1d:51:0a:e7:76:43:25:f6:a0:a0:83:b5:98:c7:a1:
                    22:30:c8:9e:d0:10:c2:ad:b1:bc:55:96:05:48:b9:
                    12:73:78:82:2f:8d:b5:e0:65:3a:13:50:8d:28:bf:
                    de:e1:67:08:de:95:35:10:c4:1f:af:fa:04:85:f5:
                    b8:d3:70:8f:fd:18:5c:04:ae:52:72:95:83:f7:25:
                    70:e8:a5:c7:09:fc:8a:19:95:51:bd:99:6c:bf:4d:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.180.136.0/23
                IPv6:
                  2a01:9a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199320

    Signature Algorithm: sha256WithRSAEncryption
         21:27:8c:7d:0c:46:af:ca:07:1b:05:76:75:ce:fc:cd:24:b5:
         7a:89:f4:a3:b5:b3:3c:32:fe:09:30:54:64:4e:7c:e8:d8:58:
         03:f9:dc:85:7e:f4:2e:92:e8:c8:72:a6:6c:cf:a2:78:3c:97:
         0f:64:69:e0:3b:19:ea:f5:b0:37:ab:45:2c:39:47:6d:af:d6:
         75:31:e0:88:f7:4d:9d:98:04:76:1c:10:fe:e2:b5:eb:6d:e4:
         18:22:c5:32:df:32:16:2f:e2:e8:a0:c1:f1:0d:45:f0:3b:27:
         d7:17:83:8a:33:0a:d1:00:c7:fc:ad:f1:7b:29:01:6d:2b:7f:
         cd:53:e2:de:82:50:ef:b4:e9:78:10:18:6e:2d:7e:31:26:af:
         cc:d7:99:27:e4:8b:26:a0:85:f4:34:12:7b:f2:81:17:cd:0d:
         14:ae:d3:17:ae:73:e8:26:62:17:bb:60:72:66:db:78:4d:74:
         0e:a5:9f:8d:b7:be:13:1e:41:78:ec:79:be:d9:19:cc:83:d3:
         96:98:85:aa:d1:ae:17:9a:13:0d:8a:a4:cd:2d:62:f3:91:58:
         87:03:84:f2:62:ed:6a:50:1c:f2:24:23:11:0d:50:3a:23:75:
         46:5e:9f:a6:f7:8b:de:ad:40:11:f6:0d:c1:44:b4:85:9a:ed:
         fc:08:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----