Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
File:                     CcdG9nt6xW6m3YWVHsAiy71nrwY.cer (raw, json)
Hash identifier:          UVeJ6U+mjRvscdmmSf0BO3aI0QvQJND2UxFCMBInB2E=
Subject key identifier:   09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942369A2084562D488B476687AE402C995
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210759
                          IP: 185.204.96.0/22
                          IP: 2a0a:f540::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:a2:08:45:62:d4:88:b4:76:68:7a:e4:02:c9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:29:01:59:c2:7f:b8:5c:a3:ff:17:f3:60:
                    aa:3d:41:44:ee:a0:f7:29:1d:69:49:7f:3c:c9:82:
                    ea:4c:07:cb:2a:1c:6f:ea:d0:41:44:9f:e2:a8:31:
                    ce:6d:62:fb:54:ca:81:40:b1:31:4e:10:09:94:46:
                    0e:83:58:c6:c3:ad:a3:77:2a:b3:fb:e0:3a:81:96:
                    3a:ef:68:88:ed:e0:b7:be:4a:78:a9:35:d3:8d:41:
                    66:37:f5:e1:40:ef:83:ce:a8:39:9d:10:f2:95:a7:
                    39:6a:f8:ee:37:cc:dd:c5:63:e8:3d:04:75:80:8e:
                    f5:17:74:71:c2:b4:ea:0d:b6:05:1b:7f:8e:e4:be:
                    9f:ff:a3:d3:5b:43:cb:ff:d0:71:f1:40:5a:2b:6d:
                    44:b0:7a:5e:4c:3f:f9:18:0a:ed:ae:48:0f:15:06:
                    c1:36:09:f0:99:4c:4c:7f:2d:1d:76:c5:7f:08:7c:
                    24:8c:d9:3e:22:cf:51:61:af:12:00:24:10:99:41:
                    76:80:b8:fe:8a:c2:c3:4f:88:a1:42:39:40:da:fd:
                    ec:11:fd:0d:d8:20:88:0b:20:d0:db:eb:94:4b:5c:
                    8a:d0:3d:3b:69:60:1a:be:af:98:06:d2:12:ec:0e:
                    59:d3:e9:b4:c3:e5:46:0b:2d:47:c8:f0:f5:14:81:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.96.0/22
                IPv6:
                  2a0a:f540::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210759

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:fc:c8:c8:e4:e6:8e:d4:ed:6a:4f:ee:9f:95:61:01:34:
         4a:b3:ad:40:0b:c8:10:7f:f9:af:99:40:39:56:b5:9a:a9:67:
         44:ab:d9:59:0b:23:f1:54:5e:7a:57:da:d8:3b:36:84:35:66:
         fc:80:3a:ef:3d:61:00:47:d3:48:71:62:75:ea:f7:ad:44:6f:
         40:ed:f1:df:8b:e7:20:bd:af:16:5a:7c:04:22:1e:0d:d0:dc:
         b8:ad:e2:ca:88:78:4a:5a:04:d0:9a:db:b6:10:e1:ba:8f:be:
         f2:a3:28:70:a3:2a:49:56:b3:ca:65:b9:e1:cc:d7:0c:e8:4b:
         a0:54:02:27:95:86:6b:0b:cd:05:75:be:26:ec:8e:34:d8:7d:
         3c:e2:b6:47:53:fe:f2:b5:f7:e5:1f:64:dd:7b:0c:da:39:52:
         a0:f8:c4:da:82:75:97:3a:5e:6b:a1:9b:38:fd:68:97:a9:d1:
         38:f2:ad:36:ca:87:66:76:ba:63:64:10:c1:0a:7a:6b:56:a7:
         c6:57:35:a8:f4:16:a2:60:d0:d0:e3:a6:5c:41:f8:75:3d:3a:
         47:f4:ac:59:24:54:83:5e:d8:f3:77:42:45:eb:3a:93:93:79:
         7e:fc:d8:36:e7:f2:0a:4c:4a:b7:1c:35:b0:7a:57:cd:29:24:
         bd:7b:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----