Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
File:                     C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer (raw, json)
Hash identifier:          oLLDdA56lR9eGrqaYHWWzlMT3+QRm/+5mZsHXpg5rPA=
Subject key identifier:   0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FD242D230B80A580550FC82623B76
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48804
                          IP: 185.140.80.0/22
                          IP: 2a07:1b40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:d2:42:d2:30:b8:0a:58:05:50:fc:82:62:3b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:93:ec:26:5f:3b:6d:64:c8:ea:57:27:63:
                    6a:2f:1d:81:a5:34:42:c0:d4:d5:60:9a:0f:b0:50:
                    bd:4f:2f:39:5a:1c:96:5b:db:2a:dc:7d:fb:b3:1a:
                    b6:a4:24:6c:6c:98:34:69:aa:1a:f7:1e:ab:ca:d0:
                    a1:79:5d:62:de:50:c7:34:2c:35:14:0f:e5:32:c0:
                    7c:37:a5:7f:9f:b8:06:fe:90:79:d1:51:f4:aa:74:
                    7c:e3:38:82:a1:a6:38:5f:39:1c:3e:ba:8e:16:68:
                    f4:98:e6:1d:73:be:61:ba:16:a0:65:d2:13:c5:8d:
                    71:4d:9c:24:9e:f8:69:25:4f:f1:79:08:85:f4:07:
                    df:b7:f0:ea:3d:fc:b6:eb:f4:07:34:71:3f:71:f0:
                    53:4b:c6:e0:4a:1f:d4:1b:8f:be:f7:a8:36:84:5a:
                    36:6d:a7:fd:61:84:b2:34:7a:fc:18:11:2f:d2:68:
                    42:9d:f9:b9:81:27:b4:19:92:a0:e5:a5:ce:bd:65:
                    99:5d:16:5f:80:83:82:9d:12:37:e2:b5:b7:d8:ef:
                    26:75:df:59:f6:00:5a:39:5a:24:8b:46:04:ab:24:
                    e7:b4:92:68:83:c3:44:ad:2c:b1:4e:1b:fb:32:df:
                    94:cc:50:5d:71:a2:93:f8:3f:e3:37:e6:59:b4:e5:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.140.80.0/22
                IPv6:
                  2a07:1b40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48804

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:97:a5:3e:be:73:08:67:14:62:ea:b2:77:cf:b4:63:89:
         e9:39:21:e7:87:5a:9c:9e:75:94:11:c0:bc:67:f9:be:b3:ed:
         d6:d0:e5:ff:0c:7d:5b:c6:36:e3:19:ec:58:cc:62:42:d3:fd:
         d9:48:f7:93:fb:6d:d6:80:f0:81:00:75:e6:fc:d0:34:5a:9f:
         7c:e6:95:68:a0:6c:10:48:d2:35:e6:f8:da:22:bb:dd:cb:02:
         bc:da:8a:1b:4e:4e:6a:5a:a7:75:71:fb:c4:fa:e6:b1:6e:ae:
         af:c1:7d:82:e5:b0:50:8c:60:65:f4:de:0e:0f:6b:18:b6:76:
         6c:de:f8:92:de:34:27:12:15:81:6c:b5:f7:ec:c0:00:09:99:
         9f:4e:df:44:c6:0a:d8:1d:ba:c1:e4:70:af:d8:4a:56:82:d6:
         76:57:bd:b0:5e:51:e4:d0:50:01:b3:44:58:57:0a:ff:da:33:
         b8:8d:ca:75:6c:5b:d8:6d:5f:d3:36:43:69:41:4b:7e:94:0c:
         54:fa:47:3b:36:f9:30:92:d8:06:11:7c:7c:c1:ba:70:67:b7:
         4e:d6:22:15:e1:cf:15:9b:75:84:28:6e:0b:72:5f:43:34:da:
         db:3a:67:06:0c:32:d4:3a:07:fb:5b:f5:46:d6:ff:7f:29:9a:
         cc:43:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----