Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
File:                     DjMedHrdOCkl1soNsipNquqi1h8.cer (raw, json)
Hash identifier:          pcBLZJie096dzI8a52n+0RPnOJJZ1hfJgNereAzWs8A=
Subject key identifier:   0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5B7E1117B9F536DF6B1FE38B94D03
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215544
                          IP: 2001:67c:de0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:b7:e1:11:7b:9f:53:6d:f6:b1:fe:38:b9:4d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:68:a4:1a:43:97:86:94:a8:84:af:71:60:
                    bb:11:c6:bc:d9:e8:ad:ae:cc:ee:8f:3c:28:fd:5e:
                    31:ef:bc:30:f7:e0:83:6b:e4:4d:0e:a2:f7:2b:02:
                    46:19:d9:fc:b8:9a:f5:36:e0:0a:d2:41:16:87:b3:
                    60:72:75:70:17:ba:82:22:0e:c8:a5:83:14:a7:ce:
                    00:db:9a:ef:50:70:b6:66:59:a6:bd:b4:db:2f:ac:
                    e9:6a:0c:8b:fc:2d:cb:e0:3e:a3:03:0f:5c:f7:51:
                    c4:94:bf:5a:69:c8:bb:7d:ea:e2:8c:91:0f:8e:25:
                    5e:36:80:fb:4d:3a:61:7e:59:65:39:78:a1:3f:62:
                    79:a1:c2:f8:64:b2:41:08:2a:17:ce:b3:71:d7:65:
                    ab:e1:72:7e:5c:0a:cc:be:1f:07:6c:54:09:da:5f:
                    66:76:4e:ce:03:3a:dd:ed:e9:62:86:78:1b:dc:00:
                    48:36:aa:b8:11:8c:e0:b8:d3:eb:96:25:5b:46:1d:
                    4e:3a:37:a2:eb:42:c6:3c:4d:10:1f:b5:80:87:20:
                    5e:60:f6:1f:5a:ac:c3:d8:54:21:21:e6:1c:ea:fb:
                    98:7f:4f:b5:35:ea:20:c3:ec:3e:9f:7a:b4:10:71:
                    c2:c8:6b:ec:f8:20:7b:fb:e7:d5:02:3d:c8:4a:9d:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:de0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215544

    Signature Algorithm: sha256WithRSAEncryption
         98:c9:fe:91:65:e2:ac:85:51:b7:63:cd:76:63:fc:a2:5f:e9:
         c6:ae:1a:77:75:4c:5c:2a:d1:2b:02:22:49:3a:47:79:67:fd:
         4c:ca:18:08:92:7b:a9:46:be:a3:dc:80:31:f7:aa:46:f3:d4:
         5c:0d:39:e3:64:21:81:c2:ee:2a:1d:5a:c0:ba:e6:9a:0d:26:
         75:42:5a:79:9f:5b:ea:01:3f:56:9e:01:5b:fc:76:c2:2a:fd:
         26:6d:41:31:d5:de:8e:85:aa:08:37:2f:c0:e9:c6:bd:1e:84:
         9c:1b:84:33:71:e7:d0:b1:f9:0f:17:32:cf:34:1b:8d:8f:a2:
         3f:e8:5a:59:95:3f:cd:6d:e8:ae:89:ad:77:7c:d9:55:c7:87:
         ab:42:73:c8:9b:53:25:b9:4b:fa:97:0a:bb:9e:9b:81:67:8e:
         12:fb:02:c5:cc:a7:fd:01:88:d2:ef:c2:ac:1e:15:3e:6d:49:
         bd:8d:39:de:90:c7:15:72:7d:f9:39:67:9e:70:a1:f7:10:75:
         25:9f:7d:d8:06:c8:63:06:0c:0d:94:f1:ec:87:28:ac:5f:fd:
         df:8f:8e:56:04:f9:54:b2:42:e5:12:be:ab:71:fa:c0:f2:c9:
         04:e9:eb:d3:f0:0a:48:e0:57:d8:3d:56:c5:ee:27:14:0f:b0:
         83:f8:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----