Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
File:                     XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer (raw, json)
Hash identifier:          FO384R4h1u9fnTaQYkP67pPGJIjQGI9Ynum5NrFOdxc=
Subject key identifier:   5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA4F0CB7F32330E1E84F07057D26E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51996
                          IP: 46.183.208.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:4f:0c:b7:f3:23:30:e1:e8:4f:07:05:7d:26:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:68:04:21:88:37:e9:b1:1f:4c:04:02:7e:0a:
                    cc:c6:7a:96:53:57:ca:84:64:eb:9f:d1:6c:f3:97:
                    b0:71:cf:ae:ad:14:6c:d0:0c:d8:d0:1a:43:d1:65:
                    62:67:6b:dc:3a:d7:d3:08:17:3f:78:3c:7e:f4:f1:
                    0e:46:39:64:23:30:95:89:3d:30:eb:07:d9:f5:b4:
                    8b:99:2b:46:9e:15:0b:24:25:de:6c:24:a3:74:fe:
                    4f:df:88:79:03:52:4b:cc:26:5d:36:a9:8c:0e:ec:
                    e6:84:b3:80:e4:45:b4:e1:f7:bc:bb:8e:36:70:d2:
                    d0:3a:a9:e9:ba:75:7a:5b:a4:50:45:d0:aa:b9:eb:
                    40:d0:b5:1f:fe:7c:ae:4d:3f:20:4e:d7:26:e7:5e:
                    a6:3b:5a:d8:99:00:d6:85:7a:f7:1c:b5:7f:f7:87:
                    f3:63:ea:9f:aa:6a:12:3f:a4:5c:31:22:e6:85:f3:
                    dd:e9:04:0a:27:c7:d7:06:f1:c7:50:9f:77:80:23:
                    09:b2:8f:7e:fd:d4:63:e4:4f:41:e6:3c:10:ed:6f:
                    b7:c4:ac:4b:3f:61:f3:79:0b:2d:8b:9b:1e:d4:bc:
                    25:6b:61:5d:97:d1:4f:2e:2f:b9:f6:a2:f7:5d:79:
                    3f:8a:3a:9e:0b:cd:74:9f:f5:93:92:34:b3:af:d0:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.208.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51996

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:90:3d:fa:1f:e4:59:16:c8:05:ec:ba:cd:b5:fb:2c:cd:
         8e:3b:b0:3d:1e:77:ee:f5:dd:43:5f:05:1c:d5:83:1e:e3:d8:
         b0:f5:f9:ef:7f:66:be:e9:fa:68:7d:cf:ed:8a:5d:85:de:af:
         df:00:cc:59:aa:a0:73:92:22:e9:b8:9a:70:19:52:e0:93:a5:
         45:1a:25:2b:7e:a7:f7:d6:31:17:87:86:c9:28:29:67:68:5e:
         2f:2c:11:fd:7b:f5:02:30:59:ae:58:44:76:2a:bc:18:56:95:
         66:7f:31:07:1c:1c:42:88:ee:e5:5c:d6:2c:54:66:d3:84:4b:
         c1:ed:6d:52:7b:eb:33:8a:87:fc:25:18:0a:ab:4d:6e:76:3f:
         81:e4:b4:cb:7b:ad:a8:74:c9:ec:6c:f4:89:d9:82:8d:c3:5f:
         b5:2e:88:43:37:59:3f:a9:13:de:8a:57:a3:d2:67:92:de:ae:
         97:b2:00:20:41:e7:ff:79:a4:93:1f:7c:54:f3:00:f3:2f:dc:
         4a:ec:e9:32:08:25:11:e9:b8:30:ec:d4:30:c5:65:8d:03:77:
         b9:2d:bd:de:cb:b7:a2:17:a1:d8:4b:2b:0f:91:3b:78:25:2b:
         0a:65:ba:d6:a6:a3:58:f2:d3:12:de:9f:2d:ce:92:8b:77:fa:
         f2:d6:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----