Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
File:                     c9-R-zxozrhlDuGaY85As8WSpWs.cer (raw, json)
Hash identifier:          7nl/Z6tBE6eLwo8MEyjXvGRWXaXcfZ0ZUMbLiS7TATI=
Subject key identifier:   73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C67D8F55C12ECDB3F13A921B6E2CA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50655
                          IP: 178.20.168.0/21
                          IP: 2a00:1d38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:67:d8:f5:5c:12:ec:db:3f:13:a9:21:b6:e2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a0:84:fb:d3:b4:eb:c3:8a:a0:96:3f:23:5b:
                    a9:de:23:75:6f:f3:26:ec:f9:0a:8a:98:f7:4b:0b:
                    41:7d:e3:f3:ed:93:98:64:d4:b0:27:f8:38:a0:cd:
                    10:8a:cf:73:c4:38:03:ac:b2:83:21:c5:a6:b9:23:
                    e0:86:0d:f2:4a:6b:eb:6d:df:10:be:99:e7:18:79:
                    77:91:33:3e:d1:69:e3:d5:bb:fd:2a:37:6c:85:3e:
                    b9:f9:ad:63:6e:19:8c:c3:2b:79:bb:a0:44:b9:1e:
                    ab:f5:2d:c4:dd:cb:a9:08:45:9e:56:b1:8c:db:50:
                    b1:36:ad:6d:25:22:c4:09:e4:e9:38:db:b0:0e:6c:
                    9e:07:6f:bf:46:b5:df:b5:cb:05:4d:6a:ea:23:16:
                    2f:a5:17:6a:12:1a:03:5a:d5:4d:2c:84:8a:cf:03:
                    14:c1:28:6d:3e:01:51:c4:58:5e:cc:9c:a6:13:b2:
                    02:12:be:98:10:a2:e3:a0:50:d4:60:ea:eb:44:7f:
                    ad:2f:37:2f:38:97:b1:5e:69:5d:c4:fd:db:98:87:
                    9a:82:6f:70:06:be:dd:4a:31:95:9d:ad:92:55:88:
                    a2:5c:de:34:2c:b6:59:b8:27:36:49:5c:a5:d3:3f:
                    c3:7f:68:1e:af:cc:8a:e9:88:ae:f2:1a:d2:81:41:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.20.168.0/21
                IPv6:
                  2a00:1d38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50655

    Signature Algorithm: sha256WithRSAEncryption
         5d:ac:f9:d3:ec:48:61:01:3b:19:24:62:49:25:71:cc:ee:67:
         13:99:6a:5e:e6:f9:73:83:23:13:6b:35:2d:6a:d9:68:3a:91:
         eb:23:dc:dd:9c:51:39:3a:18:ca:17:e0:16:9f:5c:b8:c6:ce:
         b1:06:76:fd:a0:7f:6f:bc:97:97:a0:b8:dd:3f:15:26:49:ec:
         0d:9a:95:f0:2c:44:32:0b:c1:7a:f0:4b:3d:05:13:8e:7a:c5:
         ba:92:5b:0f:ab:af:06:b4:92:c6:fa:10:07:11:58:8a:ce:d4:
         60:58:e0:15:14:dc:e3:4b:ef:9f:e7:01:c9:5f:ec:8e:a8:8a:
         5e:a7:6f:c7:eb:26:d6:c1:7b:97:78:ae:8e:a8:7b:c9:50:dc:
         9b:06:ad:3c:fd:4a:37:bd:20:88:51:80:0d:00:70:30:db:87:
         6e:77:7d:f5:f8:d3:02:69:6d:af:5a:94:ce:20:49:89:de:5b:
         51:93:95:fe:00:8f:62:1e:27:7f:1f:ff:da:16:96:fa:1b:83:
         b3:87:3c:e3:bf:b3:bd:34:ed:f4:a7:27:89:a7:4d:75:46:d4:
         5e:dd:15:de:e4:8d:83:86:a2:d9:50:28:d7:58:39:90:19:11:
         9e:47:31:8a:ee:46:5f:57:42:5e:b7:33:57:50:33:36:55:de:
         b1:95:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----