Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
File:                     d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer (raw, json)
Hash identifier:          /SWnY6Y/2YjCULvHDQEIM3PMQh9FbBD50wuFa+YOFkg=
Subject key identifier:   77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FC2B05D20972C5458C90A3945FF8E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 38948
                          IP: 80.251.80.0/20
                          IP: 2a0b:8140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:c2:b0:5d:20:97:2c:54:58:c9:0a:39:45:ff:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:ef:63:de:d5:be:d5:f1:c6:7b:b6:28:e8:
                    8c:a8:ec:38:e0:af:a9:71:7e:a1:24:4a:ba:25:4a:
                    37:67:32:27:d3:af:b2:4e:aa:c0:21:57:7c:4d:01:
                    74:67:01:9b:4c:6e:c3:74:38:98:e9:87:79:d8:eb:
                    d1:27:cd:af:67:bc:32:49:b7:87:bc:49:4f:5d:e7:
                    2e:fd:d5:44:12:67:4e:32:5d:b8:d2:7f:8e:33:0f:
                    f5:ef:94:28:d0:62:21:d4:2b:63:3f:73:7e:e7:60:
                    ae:ac:28:3e:fe:16:3d:d9:2c:00:65:9f:e8:8f:0e:
                    d9:b8:a3:fa:ff:ee:ec:67:19:3e:8e:12:15:81:3f:
                    12:ff:63:9c:bf:e9:ef:26:17:ef:bb:a2:50:ba:0b:
                    75:f3:c3:a4:ac:45:a3:0b:32:5c:10:4c:10:e3:6d:
                    b9:75:03:09:87:38:f2:59:79:00:e8:59:8a:bd:21:
                    a2:22:24:ae:f2:5f:bb:d4:fa:5b:58:45:a9:2e:0e:
                    5c:e4:24:f6:33:15:69:dd:de:1c:61:90:11:56:0c:
                    a7:57:c9:96:35:45:63:3c:54:bb:e9:b2:f9:a5:36:
                    01:a2:94:b3:64:5a:1f:70:0b:9e:51:cb:11:eb:41:
                    6b:05:69:ab:ba:e1:7b:89:c9:81:a9:58:6a:24:33:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.251.80.0/20
                IPv6:
                  2a0b:8140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38948

    Signature Algorithm: sha256WithRSAEncryption
         14:d0:2a:17:1b:12:86:9e:08:a0:c4:94:25:82:06:c8:9c:47:
         d3:e2:5d:62:34:86:6d:2e:d8:1f:db:b6:27:a5:2d:9f:70:03:
         86:9b:3d:cc:f3:5b:23:aa:a9:5a:95:dc:3b:f1:e4:49:80:eb:
         ec:1b:63:37:7c:d2:5e:f9:06:e6:3f:1e:98:17:b1:81:9e:a2:
         53:99:93:bd:0e:2a:8c:c2:a1:a3:54:8a:80:e7:05:73:e6:bc:
         59:6d:61:ed:60:54:7f:54:f3:69:39:77:c2:0c:89:83:0d:5d:
         b9:18:42:9f:4b:df:fe:a8:38:0e:e2:c9:92:cb:aa:6e:40:5e:
         10:7b:a3:73:30:51:35:f6:f6:d7:c2:1f:6e:bc:8f:8c:b6:94:
         ac:58:e6:de:58:f0:d3:ec:17:d8:0b:7e:dc:d8:a9:54:af:79:
         1e:af:29:68:b7:f1:5a:17:e1:c5:fb:ba:f6:71:79:87:ac:2d:
         41:c3:16:8d:d9:66:a0:db:44:ee:54:3f:2b:cd:eb:8a:8b:9f:
         e6:24:8f:eb:b5:55:4f:33:ce:2e:d5:da:94:88:a0:c9:dd:5f:
         b2:c2:bb:92:24:a9:c3:81:06:27:97:29:72:b2:65:fc:3a:ae:
         a0:c1:84:85:37:1e:a0:0d:15:cc:f6:e6:d4:ad:42:07:f8:20:
         5c:07:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----