Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
File:                     PidqxRoTJAHbTNdB2GalRiKg0Vw.cer (raw, json)
Hash identifier:          M/G33Y0W0ZM/8WwxW1tZzYpHgOz3R8G6N7C+rpXi1ak=
Subject key identifier:   3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F9C4C7290779EBDFCC44B212E364E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206330
                          IP: 185.135.189.0/24
                          IP: 2a10:1640::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:9c:4c:72:90:77:9e:bd:fc:c4:4b:21:2e:36:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3e276ac51a132401db4cd741d866a54622a0d15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:f8:ad:9f:60:a5:7f:14:9d:bc:18:95:e5:
                    5c:7d:1f:ea:01:25:b6:15:45:ee:89:2b:37:b7:c3:
                    1e:94:13:fc:f8:7d:09:c9:e7:5e:c8:9c:28:60:48:
                    1c:61:42:a2:19:cd:28:cd:4f:f3:b9:dd:08:58:07:
                    2d:19:eb:0f:b3:9d:bc:0d:4c:61:b2:64:b0:16:28:
                    e1:cc:7c:d4:47:d0:08:2d:02:80:cb:40:ff:93:db:
                    09:66:a2:5a:7b:c3:d7:f2:e8:a8:ba:86:87:18:a5:
                    42:fe:61:a0:54:01:75:a2:53:51:82:69:6a:92:17:
                    3f:70:d8:c4:73:63:b4:39:fe:26:27:51:98:3f:b8:
                    5c:3c:47:1c:ee:3d:f0:13:af:9c:28:f1:4a:2a:9c:
                    7d:e0:fb:5a:98:17:84:eb:e2:36:07:9a:2f:48:96:
                    52:5e:9c:85:e7:83:d4:18:dd:fc:03:d5:6c:ae:f9:
                    60:5a:fa:1f:82:1d:8e:fe:b0:10:95:6e:d6:00:de:
                    1d:63:31:8d:4d:a6:e3:44:56:37:a6:df:1e:d4:f1:
                    c7:38:06:ac:71:a7:3a:4f:21:9a:9b:4b:c0:5e:71:
                    da:e9:7b:4d:b6:d4:be:06:cb:ee:d9:73:55:08:32:
                    63:17:8d:f4:fb:7f:f3:bb:5d:c4:ae:83:4d:a8:93:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.189.0/24
                IPv6:
                  2a10:1640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206330

    Signature Algorithm: sha256WithRSAEncryption
         0d:30:17:3d:80:1d:cb:f2:58:20:f3:e4:d2:c0:3c:3b:0e:6b:
         70:77:72:5e:2f:1f:df:2b:35:8c:c0:ed:ec:be:c9:ac:d5:81:
         e7:b1:08:60:7a:dd:be:9d:6c:b5:7e:31:81:bd:8c:bc:23:c5:
         be:80:59:e6:0a:ae:3e:76:50:39:6d:83:30:f6:dd:da:da:69:
         57:a8:92:88:2b:c6:cb:2a:a0:30:59:12:eb:86:5c:f4:a6:90:
         0e:df:b5:86:83:e3:a4:58:af:e0:35:a8:9e:90:0b:aa:62:34:
         75:a4:2c:1a:ea:8a:f8:22:cc:f5:0a:6c:01:8b:20:11:b7:2b:
         40:ec:8c:83:03:5a:72:46:f5:07:fc:95:4e:7a:8e:34:6f:29:
         e2:be:ec:f2:ff:00:1e:ce:61:30:b9:49:f2:8b:42:49:d2:bf:
         fa:e0:ea:67:c6:b5:ae:50:12:7e:3f:84:1f:cd:bd:69:7f:2c:
         a6:e4:b0:d8:60:5f:ff:fa:ce:d3:3a:f4:c8:b6:be:9e:af:34:
         12:cc:13:ae:9b:9d:14:0c:7c:a9:54:61:8a:a8:e5:6f:e2:63:
         6c:e4:8d:c8:98:6c:c7:1e:0e:60:d8:68:01:14:df:d6:ea:2d:
         e7:9b:ca:90:8d:9f:b1:f8:99:9a:73:0f:48:a1:49:69:66:4b:
         c2:0c:53:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----