Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
File:                     DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer (raw, json)
Hash identifier:          tFW8hMwOucFhtq7OsMJUyqm50r+NtLTVLl5WmFjKsCM=
Subject key identifier:   0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FDF019838F32EBF7BF24A8CC75958
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208705
                          IP: 193.33.121.0/24
                          IP: 2a12:6dc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:df:01:98:38:f3:2e:bf:7b:f2:4a:8c:c7:59:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0d333f72d9e294543825be63729f8034a4517090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:46:a7:4c:91:4f:3a:c5:7b:32:54:e0:5b:
                    e0:70:50:98:35:fd:00:f9:18:10:4c:7d:8f:c2:96:
                    5e:b5:6b:3c:85:38:30:98:8d:94:a0:ee:89:79:55:
                    b6:b3:00:57:b3:c3:ce:1d:c8:6d:86:ee:d9:02:1e:
                    ce:27:d6:90:20:31:7b:2f:44:e0:17:47:15:00:a1:
                    1f:20:6a:07:cf:5c:b1:c3:2e:3e:bb:07:6e:cd:c9:
                    d5:3d:99:3b:ac:ff:14:c5:f5:a0:06:dc:af:84:b0:
                    8a:87:23:7d:ac:26:48:9d:fe:34:f8:4f:70:e5:81:
                    20:1f:dc:e7:f0:13:f6:16:50:7a:17:a7:e9:68:ec:
                    7d:fc:58:c6:70:1a:09:a6:b5:cf:29:ea:63:45:f9:
                    a3:c7:1e:a5:75:0e:78:d6:58:08:43:d1:58:fd:f2:
                    26:77:84:95:70:35:e9:b3:f9:56:41:45:ea:7f:11:
                    9d:7f:d4:74:21:95:a4:59:a5:a5:60:ea:57:e3:fb:
                    ee:f4:52:96:e3:68:79:b8:70:9d:54:eb:38:59:1b:
                    d7:7c:c6:dd:49:6f:47:78:0c:ef:ef:d6:e0:59:de:
                    c2:dd:95:5a:80:9a:57:7b:b1:be:43:f4:ac:dc:9e:
                    fd:2f:ce:88:5e:b1:a4:33:f5:03:35:52:97:c9:80:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.121.0/24
                IPv6:
                  2a12:6dc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208705

    Signature Algorithm: sha256WithRSAEncryption
         a5:7e:1d:00:4e:b2:34:50:34:2e:9b:d6:03:b4:a8:fb:e5:e8:
         a6:4b:67:19:4e:36:5d:ba:e4:3f:bf:e1:19:c3:f2:a8:b0:58:
         bf:f2:d6:c9:1c:ad:d8:71:7b:3f:5c:16:0e:35:37:a1:57:de:
         e1:69:2e:f9:da:ce:4b:f9:8a:ad:07:45:6c:d8:e2:d4:03:71:
         fc:2f:5c:df:df:59:04:4f:8b:5e:cb:c5:9b:0c:a9:25:db:84:
         33:b8:f5:e7:14:dc:7f:d9:c1:b1:8c:35:3a:c4:b4:d4:2b:f4:
         62:00:72:bb:8b:2b:dd:5d:58:ff:71:39:49:c2:64:fe:60:d3:
         82:1a:f0:04:46:3d:2d:24:6b:03:26:52:47:e2:e3:a5:a8:58:
         2e:7e:d4:84:7e:8d:16:6d:d5:46:2b:1b:15:d1:68:11:cd:19:
         bd:52:97:a2:c7:cd:36:f0:69:87:cd:2f:84:60:5c:95:f0:d1:
         d8:e2:44:f8:75:3b:10:16:2a:48:f4:70:1c:9e:53:19:20:ed:
         8f:21:a9:a4:48:e7:2a:ba:e6:cb:9f:de:28:52:90:f0:51:36:
         f4:53:06:e3:48:03:f8:ff:76:db:cb:5a:64:20:70:bb:ab:d6:
         3e:db:ea:fc:1d:8a:7e:7d:57:fd:f3:d8:1f:ce:e5:e9:14:7e:
         a5:25:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----