Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
File:                     Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer (raw, json)
Hash identifier:          TXeN9vd367cufSL0C932zA9/jsXYf06oCc3grmFEapw=
Subject key identifier:   45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D64297539DC4206B618385C4E7A167
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199710
                          IP: 185.42.236.0/22
                          IP: 2a01:6860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:42:97:53:9d:c4:20:6b:61:83:85:c4:e7:a1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:27:57:bc:6a:e1:33:d3:6a:0f:11:85:6a:
                    e9:58:81:a5:c8:95:da:42:0a:1d:2d:86:a8:97:a5:
                    f7:2a:dc:cc:ca:fe:ea:44:37:74:4a:02:17:24:e2:
                    1c:e6:80:ab:4a:49:32:f3:75:56:98:ab:51:8f:7f:
                    66:3d:33:6f:e3:64:a6:ad:db:00:22:fd:62:0e:87:
                    54:1a:7c:d1:ba:90:3f:92:5d:5a:a6:4a:d8:b8:f2:
                    91:4e:91:7f:85:96:ea:7f:a3:50:e4:30:0b:d9:f3:
                    f6:19:74:c2:a6:92:65:37:5b:8b:51:e8:e1:6d:b6:
                    e4:75:fe:74:1b:0e:ac:32:11:5f:67:b8:1c:ed:5c:
                    40:41:6a:f3:14:80:a9:b9:01:4c:ff:bc:a4:b4:59:
                    4f:61:8f:9d:e8:97:c8:f9:37:ee:fa:01:c3:84:25:
                    70:d1:c7:b3:51:5c:34:61:21:a9:8f:c5:59:37:50:
                    bf:a1:09:8e:0b:7e:46:29:f9:26:97:42:87:f8:e4:
                    13:ce:24:d5:a7:50:d6:54:17:5d:c0:26:b0:24:9c:
                    d4:66:b1:0d:56:49:bb:71:ea:56:51:0e:f4:13:56:
                    fe:da:52:36:42:2e:4b:43:e1:1b:07:62:7a:86:47:
                    d8:3d:d1:ea:6b:1a:01:15:d3:96:ec:d5:9f:e3:66:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.42.236.0/22
                IPv6:
                  2a01:6860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199710

    Signature Algorithm: sha256WithRSAEncryption
         4b:88:2e:19:24:70:00:f4:5c:2f:a5:b9:eb:3a:f8:70:5f:c6:
         f6:d3:5b:96:30:dd:cf:34:e7:93:c3:b7:a1:c2:bc:86:71:61:
         11:27:3e:66:c6:97:7a:33:31:08:35:93:8e:21:da:e5:ef:3b:
         8c:61:48:26:c6:8c:7a:8f:fa:c6:c4:58:cb:10:b4:86:d3:68:
         98:d5:3f:31:85:0d:19:21:c9:ec:72:98:18:98:fb:28:93:47:
         52:75:eb:1c:a6:a4:70:a6:98:ed:f8:9d:fd:90:59:4e:78:84:
         a7:68:05:59:41:75:f0:9b:fc:87:de:1c:01:d7:a5:de:be:a4:
         54:ca:f1:42:79:46:26:90:d8:46:bb:2a:d1:53:91:05:19:e6:
         ce:db:07:bf:e1:66:9d:e0:01:e1:17:6d:3e:80:4f:f6:41:8d:
         09:7d:53:cf:12:de:cc:d4:aa:5b:c7:8a:e8:98:51:12:98:a5:
         08:e5:36:9b:43:c7:42:92:d2:76:34:c0:ec:40:5f:6f:e6:d5:
         17:1c:47:36:68:c8:03:f6:71:d3:50:e7:33:43:a6:9a:6a:6d:
         5c:42:8e:f9:59:a5:4e:17:52:d6:ef:12:ee:c4:f6:1c:de:72:
         5c:9e:0f:db:d5:84:75:48:be:36:7b:d4:9c:c5:1a:a1:4a:e1:
         ee:8f:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----