Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
File:                     DdhN2sUMWa7K8GsJuFc6hioOo9s.cer (raw, json)
Hash identifier:          0sS50Ob37au3b4nrAiugfYDGNyG5uA52Emqp/rffuTc=
Subject key identifier:   0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A10CEA8DCEEB7084EA9FD78AE8432
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204280
                          IP: 185.107.184.0/22
                          IP: 2a06:4500::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:10:ce:a8:dc:ee:b7:08:4e:a9:fd:78:ae:84:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:55:57:79:66:dc:42:6e:2d:69:98:c2:e4:
                    fa:5a:2c:83:a4:47:3b:13:82:76:2b:4c:24:eb:d8:
                    2a:83:1a:20:21:55:ea:07:b1:6e:20:28:19:a2:f9:
                    f3:1c:6c:44:79:8c:60:6f:c7:a6:06:ce:81:16:d3:
                    b8:b0:69:33:b9:0a:6f:df:ff:85:fc:07:04:e6:e3:
                    37:3b:c8:14:d8:c3:63:ec:6b:65:87:e8:1c:aa:be:
                    5f:c3:4c:27:4f:01:83:1b:6b:44:81:95:88:b1:2a:
                    36:a1:aa:a9:7b:d1:9b:a6:77:20:a4:5a:73:28:9a:
                    b3:bd:53:86:4b:7a:04:61:b4:b4:75:bb:d0:56:68:
                    b9:9f:50:bc:fd:0b:aa:b7:43:83:f9:fe:ad:ed:23:
                    40:2f:ed:15:a4:17:12:43:0c:1e:2a:dc:66:7e:71:
                    0c:1c:b6:9e:c0:76:d6:73:c6:e2:92:c1:18:72:f7:
                    76:7f:84:1e:2d:d8:d0:21:67:92:61:3b:b2:c9:31:
                    5f:e5:e0:0e:c4:de:3d:36:e7:ad:19:cb:8b:78:4a:
                    4b:3e:2a:fa:67:6c:fd:1e:e8:ed:0a:7e:03:9d:83:
                    9b:1f:c5:04:b1:54:01:26:5f:63:0d:93:bc:69:2d:
                    95:2a:ee:51:f3:3e:b8:cf:f0:48:a3:b0:68:f6:40:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.107.184.0/22
                IPv6:
                  2a06:4500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204280

    Signature Algorithm: sha256WithRSAEncryption
         96:85:fc:7e:6a:94:d6:b6:5b:eb:71:d4:db:46:3b:17:62:b4:
         c4:4e:90:5d:a2:06:c8:29:2f:79:8a:27:06:dc:6b:22:a9:3f:
         2a:03:8d:9e:af:f9:da:b7:73:fa:1d:b7:18:77:87:8e:6a:de:
         e5:ab:c2:e1:22:50:59:25:c3:54:f7:6f:89:2e:6b:cb:e7:06:
         50:a3:fb:da:f2:cc:76:43:58:53:70:f4:af:03:25:4d:07:25:
         e4:7d:b4:3f:2e:52:a1:ff:e2:fa:fd:ef:97:70:f5:16:95:ba:
         21:13:f4:01:2a:c9:b3:7d:eb:a3:04:63:17:37:49:fd:d0:1c:
         20:d5:46:b0:19:b6:84:6d:c1:8f:25:26:d3:7e:42:25:5a:2a:
         86:21:fc:92:b1:e3:17:31:f0:bd:ab:55:22:b0:ef:d9:74:9e:
         5e:db:17:04:12:44:94:36:d8:34:ec:00:20:3c:10:e0:74:ce:
         57:12:a5:50:df:f4:97:3f:45:3b:6b:81:0f:a4:45:6e:b9:96:
         7d:d6:d4:e9:1a:2f:94:d8:9d:87:eb:3b:82:87:58:47:e4:ae:
         5d:d3:f5:18:4f:ed:22:92:6a:d4:98:af:50:75:f8:f5:a3:70:
         b6:5a:90:53:e0:1b:6b:67:fc:d8:c8:d2:68:0d:f0:1c:05:34:
         1f:d0:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----