Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
File:                     cbbQ4ActDKspv6hzfeKlPlFBgnY.cer (raw, json)
Hash identifier:          KriXfQFqhXf2WV+f0ypEKDHYnhLLP0IuZwfHa5WYMHk=
Subject key identifier:   71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6FF3DFF8DF35A33E3703A580A0400
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208718
                          IP: 45.87.192.0/22
                          IP: 2a05:6100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:ff:3d:ff:8d:f3:5a:33:e3:70:3a:58:0a:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:62:27:5b:b0:0b:5f:0d:01:9c:28:17:67:
                    d5:7d:9d:1f:6e:7a:88:23:0e:1a:e9:27:53:30:e7:
                    aa:71:33:e6:6e:6a:2e:e7:cb:c9:bc:4c:95:d8:fe:
                    2a:2c:73:5b:fc:fb:25:1d:7f:19:69:f4:dd:e9:60:
                    fa:b7:e4:e7:52:8c:72:bb:4b:98:97:43:22:27:a6:
                    62:90:af:8d:48:05:ab:ec:1d:c6:00:62:75:c3:fc:
                    5b:06:dc:8e:87:40:22:46:0d:00:0b:77:88:6a:88:
                    9a:c8:84:f9:67:f0:6b:36:41:fd:8c:aa:80:09:f2:
                    1f:f1:67:60:18:01:27:28:d4:bc:e9:99:b4:2d:33:
                    d0:7c:b1:be:4a:ae:8f:e9:ed:0e:cc:43:c6:c1:1f:
                    e5:ea:4e:cb:cd:13:64:05:15:4b:b2:a9:f2:a6:cb:
                    8a:6c:14:81:7a:65:b5:e9:2b:c2:0b:09:f3:de:05:
                    59:69:19:27:63:0a:0b:e8:ea:b4:8c:e2:32:73:52:
                    34:c6:dd:48:7f:8d:7e:32:6d:d9:55:5b:bc:a2:61:
                    01:ef:45:23:0b:bf:a6:1f:d5:e2:2c:66:4b:06:02:
                    78:e8:0a:bd:1e:a0:d9:19:1b:86:84:1e:0d:39:5e:
                    b3:9a:e1:b8:ca:5e:36:b1:44:f9:a3:07:82:fc:d0:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.192.0/22
                IPv6:
                  2a05:6100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208718

    Signature Algorithm: sha256WithRSAEncryption
         81:68:fb:09:08:e3:d5:2a:ca:47:11:30:2e:89:2d:32:83:51:
         1f:21:17:16:bc:0e:ca:27:0d:11:42:d4:09:69:7d:89:f3:ba:
         90:78:04:86:c7:5e:e5:7b:6f:25:31:98:d7:ad:34:12:81:31:
         54:e3:05:4c:aa:72:de:97:5f:09:f6:53:e5:9d:e2:db:66:17:
         f5:58:f2:98:4d:ea:e9:ef:38:8a:98:ab:8c:55:e0:f8:0d:10:
         fc:7c:86:44:4d:3f:56:88:56:44:34:12:a6:3a:c0:4a:5d:06:
         40:94:6b:7b:12:e3:e1:61:ff:8e:a5:86:53:65:fe:9d:39:c5:
         2f:14:f2:86:00:75:85:e6:ab:2f:42:63:d2:90:51:be:7d:cc:
         74:18:0a:20:09:13:7b:ad:ad:08:0a:63:49:1d:2d:38:69:d9:
         09:c0:e7:c6:a0:e4:d6:4c:58:a3:07:c5:13:66:98:11:04:98:
         34:2e:c9:d9:49:77:61:8b:3e:3f:f6:25:af:a0:41:6f:76:c3:
         32:0c:f1:de:55:98:76:07:8d:02:98:c8:4a:e9:8a:cf:67:7e:
         dc:42:2b:f9:a1:9b:1a:5c:b9:01:95:85:ea:ba:e8:43:a7:6b:
         72:36:af:dc:34:6c:2f:2e:61:b5:30:7c:a2:bd:c3:03:16:f9:
         e3:74:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----