Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
File:                     cRdcCDUnGBi7041t7X-Vq7xVdE8.cer (raw, json)
Hash identifier:          saN39Kn05z1I+XWfKtDzW2B2n32n1FXUTtRz7w98UlU=
Subject key identifier:   71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B66F607742BB3506314FCB9F80B1BA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43171
                          IP: 46.175.224.0/20
                          IP: 185.59.108.0/22
                          IP: 2a02:6ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:6f:60:77:42:bb:35:06:31:4f:cb:9f:80:b1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=71175c0835271818bbd38d6ded7f95abbc55744f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:d1:52:4f:3a:ff:10:b7:a5:e9:e1:9b:8b:
                    44:13:aa:7e:70:ad:bb:3a:64:36:d0:4d:b5:9e:3f:
                    07:86:36:3b:8e:c9:93:23:00:24:c0:7a:f1:eb:0f:
                    7a:8c:71:f2:11:26:a8:e0:b4:96:c2:6f:8f:d6:23:
                    54:63:45:db:e7:c1:cc:43:ee:cf:15:cb:c8:90:83:
                    77:46:0e:bb:fc:ef:e8:4c:91:3a:3a:34:ad:45:cd:
                    67:49:d3:78:17:23:65:f1:e9:df:95:71:74:1b:16:
                    a6:85:96:7a:24:00:25:41:29:8f:1e:a6:b3:ed:7f:
                    10:59:59:b5:25:e0:43:46:3f:9d:8d:de:4d:71:95:
                    01:f0:1a:6a:7b:94:eb:32:25:a2:ab:73:27:bc:8f:
                    e4:65:f1:14:a3:96:92:ae:31:1d:a5:ad:04:28:9c:
                    5a:89:05:7a:d4:23:cd:c7:4f:77:99:65:73:e8:56:
                    dd:59:ee:c0:b0:6d:ab:04:ea:50:ff:5c:ff:d1:3a:
                    91:20:61:3f:f9:1a:64:72:99:35:a5:cf:77:d9:05:
                    fe:67:96:c9:da:ad:27:04:fa:ae:5f:ac:c1:d8:f6:
                    c2:3c:97:4a:da:01:44:4c:17:04:6a:b0:8e:89:f3:
                    b5:6a:25:52:21:58:84:62:3a:70:c2:0f:40:7c:fb:
                    7f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.224.0/20
                  185.59.108.0/22
                IPv6:
                  2a02:6ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43171

    Signature Algorithm: sha256WithRSAEncryption
         09:66:98:e5:22:35:66:31:63:0d:db:2d:8f:5c:25:e7:21:b6:
         e6:8f:81:8a:5d:c6:bf:7a:d6:c7:84:0c:08:e6:03:1f:36:0a:
         08:fb:29:26:ba:ff:98:bd:e0:6e:03:52:8e:9b:07:0b:b0:7e:
         a5:5e:8b:b9:5c:4e:86:1d:bb:ad:28:07:c0:51:23:9d:7b:c7:
         2e:e6:95:62:ba:9c:21:ab:0b:a4:34:7c:d2:d5:30:16:ea:c0:
         bc:e0:45:9c:0f:bc:69:31:56:1e:b8:b4:9a:2c:42:a0:7a:d9:
         5c:16:23:f5:d8:0f:c1:fd:4c:00:ec:fc:93:46:b3:b9:b2:10:
         f1:c1:cc:95:34:34:5f:c7:f5:ba:72:67:b6:96:63:72:bd:e2:
         da:bb:04:e7:90:d6:f9:00:58:bb:52:5c:76:2c:c2:8c:e1:7e:
         98:6f:a2:29:7c:93:27:6c:69:ba:c3:b9:ba:cd:5a:8f:5b:88:
         b2:4a:70:81:03:c1:17:03:c5:38:f8:89:1b:2c:f1:18:f5:6a:
         3c:1c:da:85:a9:30:20:7a:02:e1:2f:a0:96:69:31:c3:cc:78:
         e7:d3:bc:72:56:8b:88:42:b5:84:39:34:26:94:cb:de:7f:b5:
         8b:77:ac:de:ed:5f:03:be:d6:34:0c:0c:18:48:54:4c:5d:84:
         ca:aa:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----