Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
File:                     DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer (raw, json)
Hash identifier:          5OOX98OvVU9SY9o2uL1gApJ/VPbdjuFNM6Xer3FEWT0=
Subject key identifier:   0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E1D4FE7FB59102D86B78097FDC610
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207056
                          IP: 185.167.120.0/22
                          IP: 2a0b:6a00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:1d:4f:e7:fb:59:10:2d:86:b7:80:97:fd:c6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:19:82:15:da:20:80:e2:1c:19:da:82:9c:
                    87:46:67:43:cc:a1:32:68:e6:3e:81:5c:7b:d6:c9:
                    1a:b3:e9:d2:bd:e5:82:6f:61:76:c2:50:09:ae:f5:
                    61:16:10:97:4b:04:23:53:3d:94:da:bf:f3:9f:4e:
                    97:6f:60:15:b9:79:c6:7a:94:b6:71:44:10:d0:2c:
                    eb:a1:72:90:22:21:c3:ab:c4:b0:9f:97:f1:40:1f:
                    a4:d7:c7:53:d0:b0:80:46:9c:d6:95:75:9c:f8:92:
                    7f:bd:56:6d:51:e0:75:94:e8:a9:4c:60:1a:b3:89:
                    63:53:1a:ef:2b:2e:ae:83:b2:2a:68:ff:ee:51:06:
                    2c:37:b5:91:5c:54:ff:b9:81:91:b9:2a:cd:08:09:
                    a0:4f:ea:b3:6f:82:db:3d:69:ae:c7:e2:8a:2c:f3:
                    bd:c5:d3:14:bf:ac:fa:97:fc:72:60:29:e0:13:5f:
                    6a:2d:e2:48:93:d4:7e:bb:b6:db:e7:03:72:06:12:
                    25:c3:3a:c3:7a:fc:cd:5b:96:c3:d5:8c:ae:03:08:
                    3d:52:76:b8:ae:d3:bb:b7:51:a9:d2:73:1b:69:ad:
                    45:a8:c2:2d:4b:37:75:bc:8e:57:a6:b5:80:c2:76:
                    28:18:b0:1e:a4:92:cc:f9:ab:1d:f7:b3:fc:d7:4b:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.120.0/22
                IPv6:
                  2a0b:6a00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207056

    Signature Algorithm: sha256WithRSAEncryption
         27:b6:99:ad:45:1e:a3:86:e9:3d:1c:80:97:bc:22:09:c3:54:
         15:3d:d5:fa:ab:ae:40:a5:ce:14:99:bf:27:08:24:fa:25:b7:
         24:d4:31:a3:77:a1:b7:41:91:fd:4a:0c:e0:92:2b:7f:06:17:
         16:14:b6:89:0f:b6:89:e7:45:20:68:cb:c2:50:e2:f4:d1:37:
         63:d1:ad:8f:5b:8c:69:b4:5b:25:cb:cd:9f:d0:23:43:7a:79:
         31:24:c1:10:a8:61:0c:32:4e:08:1e:79:39:73:f4:5a:cb:ac:
         69:72:f1:b1:f8:82:a8:29:3c:e3:9d:a8:74:20:fc:69:b7:64:
         e8:66:ff:d1:2c:4a:06:1e:f6:fe:39:30:ff:65:8d:3d:ea:0f:
         0e:84:af:fb:52:44:67:d0:18:41:2c:c0:5f:98:18:11:e7:4c:
         97:a5:39:fc:b6:c6:41:3e:9a:ad:a0:c4:f8:3d:15:6e:8e:23:
         f1:01:f5:1b:6d:f9:4d:83:0e:f9:17:12:3a:0c:47:aa:fd:08:
         14:e8:a0:48:bf:4e:a5:b5:0c:45:57:4c:da:dd:10:7e:46:70:
         cf:06:dc:74:08:33:fc:fd:28:f2:d5:c3:84:57:c7:46:a9:89:
         fb:29:38:9d:55:7e:17:8a:ce:e9:74:12:9a:ff:c2:4d:1b:00:
         e0:93:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----