Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
File:                     XDodlz-bM5HorayqZk0bI9d48Ag.cer (raw, json)
Hash identifier:          sEnz55dg8bQ2L+GFFVOmpSoXIlvM6TxlEZX6PuFyh18=
Subject key identifier:   5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C030A3F7F06342753D64DDA982F7C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 13004
                          IP: 91.245.214.0/24
                          IP: 185.1.27.0/24
                          IP: 193.105.163.0/24
                          IP: 2001:7f8:1e::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:03:0a:3f:7f:06:34:27:53:d6:4d:da:98:2f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:01:c1:ba:e4:1f:9e:60:ca:ed:11:41:9e:
                    9b:f5:2d:7d:f0:1f:35:2a:21:b4:25:8e:33:17:02:
                    a5:d6:f0:e4:23:c4:65:19:79:62:a8:b3:cd:fc:4c:
                    78:41:a0:52:d8:50:f1:df:9f:14:b8:be:25:e6:81:
                    8f:da:73:82:e5:57:db:60:9b:a5:d4:f4:c8:ef:77:
                    1b:90:67:31:cd:3c:4e:d9:57:b5:f7:0a:4a:55:f0:
                    a7:bb:61:bd:33:e4:0d:63:d1:ba:3e:7b:63:61:26:
                    b4:76:7e:fa:2c:8a:1a:32:4c:49:38:dd:89:60:f4:
                    06:90:81:eb:b1:97:51:68:cb:f2:70:12:ba:c7:58:
                    f9:06:5d:cf:08:b9:c5:a3:f9:b4:ae:61:bb:b1:6e:
                    66:e8:8b:af:47:04:3b:28:da:bb:ee:fa:4b:f0:cb:
                    fe:7e:12:45:7c:bc:6c:fa:ac:b3:c9:4e:9a:f4:7b:
                    89:9e:58:fb:e3:a7:dd:b3:d4:e2:7e:e8:f2:fb:50:
                    1c:59:58:45:b9:33:3b:19:06:10:e4:f5:ce:51:ce:
                    82:c0:91:2a:b0:7f:54:b0:f5:b4:4e:37:09:bd:8b:
                    9f:cc:b8:c5:fd:7e:00:f3:14:33:bd:b0:8f:73:30:
                    cd:75:ff:84:e5:da:94:a8:a3:a3:30:45:b4:a7:a3:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.245.214.0/24
                  185.1.27.0/24
                  193.105.163.0/24
                IPv6:
                  2001:7f8:1e::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13004

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:9c:96:d1:09:4d:27:22:d8:bd:49:3c:76:cf:ef:8a:d3:
         d8:69:33:83:f0:e8:97:d9:b1:34:42:d0:2f:36:30:78:be:23:
         5d:28:17:52:ff:a8:94:a0:27:e3:2f:cd:7c:bd:7d:c5:5f:24:
         65:71:af:dc:d8:6e:d0:d5:a3:76:a3:41:c1:0b:ca:4f:1f:f4:
         95:6c:fc:18:ac:f5:08:fd:1d:b7:df:50:12:af:9a:be:a3:b1:
         42:e4:b0:56:c9:50:a6:fe:e9:53:b5:be:2c:5c:aa:be:45:78:
         1a:04:e2:e9:c5:54:16:41:4f:da:ab:29:a4:3f:17:59:1c:cd:
         44:43:2d:83:7a:82:48:07:0b:0c:5c:23:19:9a:89:a5:ee:77:
         92:48:85:0e:8f:1b:6a:07:8c:06:29:ae:c6:c8:f0:5a:93:26:
         82:e0:23:ae:c8:11:ef:16:11:78:7b:6d:8d:79:6b:ee:1e:c7:
         74:09:95:2d:9e:3a:21:69:07:9b:99:37:18:41:97:a9:92:a8:
         07:b2:de:c4:4f:6e:d1:94:b4:37:f4:6f:6d:91:4f:f3:b8:44:
         50:75:43:2b:7e:4f:9b:f1:03:7e:0e:17:0d:7d:75:3a:0f:65:
         f8:48:b6:40:27:26:6a:d2:c4:22:78:4e:f8:f2:82:3b:81:ec:
         23:a8:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----