Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
File:                     CdR3O7Q9trKeh94C42U_p9jyb2U.cer (raw, json)
Hash identifier:          7KY4L5SNJe+bcFUx5VcF4rIQtUq9evmWwB9yfP4QyCM=
Subject key identifier:   09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019528967819ABF803C11A380DD3E873FA66
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 21 Feb 2025 12:58:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56713
                          IP: 91.226.251.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:28:96:78:19:ab:f8:03:c1:1a:38:0d:d3:e8:73:fa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 21 12:58:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:a2:96:e5:39:b8:52:2b:f6:e0:cd:63:18:
                    b4:d0:2d:1c:8f:9e:c3:15:a6:3d:70:77:a6:99:6b:
                    a3:9c:60:ad:f5:30:bc:97:b5:dc:25:44:a4:eb:54:
                    f2:88:37:5e:2c:4b:d9:dd:2c:3d:85:75:04:6f:98:
                    d6:01:78:b5:89:41:98:da:bb:47:ce:3e:56:df:81:
                    9b:3d:dc:e1:3b:a6:e7:48:85:5d:28:16:b6:23:f9:
                    f5:3f:18:2b:6d:c0:25:b2:0d:7c:1f:7e:61:89:d2:
                    a3:ec:30:72:79:68:ea:c3:fa:b6:84:79:52:f6:66:
                    92:e8:38:23:a5:9b:c6:46:4d:17:a0:c8:e2:64:93:
                    cb:d0:44:58:70:79:59:7a:c6:ce:0e:3b:2f:fd:f5:
                    0a:2e:e3:f7:6a:fe:80:3d:92:c9:f7:c9:33:cc:81:
                    82:68:d4:d0:c1:f5:0b:43:b4:ed:7b:7d:79:c0:6a:
                    5b:20:74:1d:ae:10:a0:e7:58:f3:4a:72:8d:f1:ac:
                    70:1b:c4:a5:c6:26:8c:8e:f6:0e:a8:3e:c6:dc:42:
                    7f:70:6c:30:d3:b3:a2:f0:db:65:50:b5:56:57:54:
                    12:c2:d1:ed:dd:a4:83:a0:1f:2d:d1:09:7e:43:d7:
                    9d:20:5d:48:83:22:49:21:60:99:f7:59:43:f1:4f:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.251.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56713

    Signature Algorithm: sha256WithRSAEncryption
         6f:ae:26:04:3d:f3:f2:ad:9c:4f:7e:f3:ea:16:bf:8b:b4:ca:
         f8:6d:b4:05:2a:af:06:6f:2f:72:9c:ff:15:f9:14:47:28:8c:
         f4:50:7b:bb:98:d2:07:42:79:b5:e1:e6:22:f5:61:ed:16:0f:
         11:7e:5c:1a:92:c8:b2:ce:de:41:6a:76:c4:85:fd:ff:fb:81:
         06:2f:be:10:9c:19:e0:03:b1:2d:ce:31:eb:ae:77:cb:d6:a4:
         78:57:69:2f:f1:96:aa:30:1f:bf:15:45:97:90:47:6c:13:26:
         24:22:4c:8c:10:ef:88:4e:e7:a8:97:d2:14:da:45:30:ff:76:
         1e:ea:33:3c:6a:0e:f2:7d:1d:77:49:e0:f3:85:cf:9b:ac:ba:
         5f:88:04:e2:45:88:97:46:9e:61:36:76:5a:6e:c6:fc:ff:f6:
         b9:b9:bf:a2:84:fd:84:28:35:ef:10:a5:8a:8e:43:b5:3e:7b:
         14:3a:2b:d4:af:fd:5c:2f:d5:b9:7e:2d:6a:76:10:47:98:59:
         e4:42:11:56:41:89:bb:0e:33:ee:6a:f0:8c:4c:1f:11:f7:b8:
         65:1c:c2:57:dd:ae:99:11:83:8b:34:75:76:e1:9f:2a:e1:ea:
         2a:6b:99:66:83:7f:6b:d3:09:4f:d9:bf:a9:d5:7c:aa:15:b9:
         39:5c:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----