Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
File:                     Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer (raw, json)
Hash identifier:          4nKL5CsAoRqDgP2isEAZjuNw8tniTYLzg8E7o21KMlw=
Subject key identifier:   0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274801FF69E739577774610167151A00
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48945
                          IP: 93.186.144.0/20
                          IP: 185.11.36.0/22
                          IP: 2a03:7e80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:01:ff:69:e7:39:57:77:74:61:01:67:15:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:79:3b:87:f3:10:ae:b4:e9:fd:df:ab:bb:
                    ac:30:6f:60:80:71:0b:f2:50:af:a5:fd:19:50:46:
                    b7:39:c3:33:e4:dd:92:4c:3c:e4:c4:89:59:e3:1e:
                    fb:ff:95:5e:71:49:05:45:7a:0c:d4:44:b7:34:70:
                    54:38:c0:70:0a:a3:e7:df:95:9e:b4:ce:dc:88:4c:
                    67:7c:f8:ee:66:de:f7:cf:fa:7c:58:54:97:d8:29:
                    6f:1c:7a:2a:62:50:92:72:66:fd:51:ca:f4:67:03:
                    c7:50:b6:f4:ea:7d:4f:fe:a8:91:21:a0:50:24:88:
                    4d:22:8b:3f:d9:53:62:3f:b0:2b:24:ed:ed:49:1a:
                    08:e7:39:a0:61:f9:ba:e1:e3:42:bd:4a:9b:79:6b:
                    81:4e:77:e5:91:df:77:04:86:75:1e:1e:0a:1a:7a:
                    06:a1:5e:d2:38:10:ef:be:67:c5:5a:86:da:8a:ca:
                    87:ec:7b:ce:38:10:9f:d8:66:e2:7f:04:1a:eb:8e:
                    45:21:ef:c9:c2:60:da:cc:94:28:78:65:02:c1:fc:
                    45:2e:95:9e:7f:2c:76:ce:56:73:89:75:d3:68:ff:
                    10:14:84:4c:03:2f:60:eb:bd:e3:69:f7:89:3c:80:
                    4c:e7:36:fe:5d:b2:5b:14:e7:c2:f2:18:b1:d5:b6:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.186.144.0/20
                  185.11.36.0/22
                IPv6:
                  2a03:7e80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48945

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:4a:aa:c8:2b:07:1b:2b:79:92:e0:d6:9d:4b:b8:d1:af:
         82:0d:71:36:ff:7f:7a:89:2b:09:06:56:48:e7:54:5a:78:e9:
         ab:d3:ec:f1:a7:56:cd:e1:47:a9:8b:6e:fc:6f:e1:5a:b5:98:
         94:72:0a:5d:1c:9d:c5:9a:ec:ff:e2:c2:1e:bb:06:56:23:7f:
         2d:a6:f0:98:da:21:ca:53:5c:c5:56:1d:a1:d9:c1:57:06:0f:
         aa:d4:60:f3:aa:dc:2e:54:9b:12:88:d6:05:27:df:6f:34:a3:
         45:bc:f9:a8:1f:51:11:16:5c:c6:87:e1:7b:41:ba:1b:a6:ea:
         a7:1e:32:24:ee:6d:c9:89:a4:09:c6:c2:77:aa:79:fd:34:87:
         31:0c:3d:14:e8:b8:3d:71:b8:20:00:b3:b5:e9:5f:2f:2d:91:
         18:76:3e:a6:85:28:10:20:52:81:9b:14:33:2d:f2:91:19:08:
         20:bc:bb:f1:31:02:23:fe:db:44:01:40:ec:3e:46:c8:a3:99:
         1f:64:e6:04:fc:f1:3f:c4:44:11:98:98:e1:31:78:bf:1b:f1:
         a2:44:b2:89:e6:42:cf:f5:d2:5a:e6:d9:e6:6a:15:9a:92:9b:
         e0:34:40:59:84:76:39:b2:d0:11:38:0e:46:6d:2c:c4:9b:05:
         d8:26:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----