Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
File:                     RRbrDuN6cQdkYexsuouSWsXiigQ.cer (raw, json)
Hash identifier:          GcGJizBUZwM56//DHqExCCEj7T+3M+JHtTe7urZSqIQ=
Subject key identifier:   45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C4117AFBCB77DDD5D218619933685
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49968
                          IP: 194.48.152.0/24
                          IP: 2a13:5a00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:41:17:af:bc:b7:7d:dd:5d:21:86:19:93:36:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:cb:e6:a4:f7:07:28:f2:2f:d2:80:0e:f9:
                    df:a1:db:f9:b8:a0:e5:b4:95:81:8b:5f:d6:5d:21:
                    a0:c5:3e:09:32:0d:4f:3d:a2:de:77:ca:7b:20:06:
                    63:a1:60:f5:c8:4c:b7:e8:15:73:66:ff:12:dd:c3:
                    77:dd:51:a9:26:2c:c3:f2:4c:b5:3d:fe:cf:81:29:
                    6c:e2:9c:3b:c3:7f:21:73:a8:17:3b:81:47:79:91:
                    1f:75:bf:82:b5:e1:46:77:fd:68:3b:09:51:c2:02:
                    aa:f4:e4:08:dc:22:3b:01:c4:fd:90:6d:f3:75:e7:
                    a0:7f:4d:c5:7f:1a:c8:1a:1e:7a:b2:ec:c3:39:15:
                    dd:b7:c5:03:cd:2d:d8:38:2c:81:c5:b1:2c:07:8a:
                    f3:28:88:be:ca:20:19:f3:09:15:fc:61:e5:d8:04:
                    a0:b3:0e:0e:92:d4:96:03:1e:4a:97:fd:78:7d:32:
                    e0:18:7f:ac:e9:f8:69:4c:51:57:1d:f5:27:1d:4e:
                    b6:69:9a:fa:af:56:92:b0:14:64:0a:eb:52:80:8e:
                    2c:ad:dd:44:85:8a:9e:bb:e5:b3:d6:bf:2f:ad:43:
                    43:8b:01:77:f1:22:e0:51:c7:86:67:45:11:fa:57:
                    ac:82:5d:3a:f0:84:a5:b9:d8:98:ba:d3:d1:2b:55:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.152.0/24
                IPv6:
                  2a13:5a00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49968

    Signature Algorithm: sha256WithRSAEncryption
         28:c7:1c:97:3d:42:5d:56:2c:af:c7:32:7b:c2:41:ad:a4:da:
         32:86:36:0e:05:82:11:03:71:80:b2:a7:fb:21:ac:d4:17:d7:
         cb:87:29:00:94:78:68:06:84:99:14:24:8b:93:d9:28:3f:e2:
         fa:05:8d:5e:f5:8f:b9:67:19:c3:e6:2a:9a:ef:5e:c2:e7:eb:
         68:d0:35:ff:d6:aa:9c:56:48:c5:3c:3c:41:ca:e9:38:0e:7e:
         8c:ae:9b:c2:f5:fe:1b:c0:21:fd:10:13:c7:cc:ea:6d:7d:37:
         36:26:d8:a9:e5:c0:cf:33:c2:b5:ba:d4:ed:01:5a:6f:c5:e0:
         cc:4e:73:a4:81:a9:fa:8b:4e:fa:0b:e7:0c:48:42:66:bf:9d:
         3b:b2:c9:31:d1:40:6e:94:0b:78:2f:05:af:0d:b3:97:32:00:
         db:ae:3b:6d:4a:ce:f3:e8:82:42:9f:80:36:5b:31:8a:d8:0d:
         3d:37:8f:d4:ba:1a:d5:47:f5:d9:4b:2b:1f:e4:dc:e3:43:e0:
         f2:c4:9b:a1:35:20:26:f4:e7:b3:f3:55:f3:7b:c9:a2:63:1f:
         31:f5:ec:31:9c:be:82:89:d3:cb:58:18:15:b6:cb:10:e3:6d:
         da:b7:86:6c:68:19:05:c0:a8:ff:3c:02:12:a1:89:85:ab:15:
         01:57:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----