Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
File:                     dB4rNVUHc-BTeX92TS4h1l5kKMc.cer (raw, json)
Hash identifier:          YZ1dJEx0mu3XAyh5DLv+O8rOLKoYR1CTQQCCXpfW8Gk=
Subject key identifier:   74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195A3D088100C3209D5FEAEDAC9EB99E2C1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Mar 2025 11:15:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35798
                          IP: 185.70.176.0/22
                          IP: 195.130.222.0/24
                          IP: 2a02:65e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a3:d0:88:10:0c:32:09:d5:fe:ae:da:c9:eb:99:e2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 17 11:15:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=741e2b35550773e053797f764d2e21d65e6428c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:d3:a6:2a:a0:e1:cf:7f:13:48:82:6b:2d:
                    e9:7c:ad:94:8d:43:76:f5:5f:c5:8f:5c:5f:d0:c7:
                    b8:18:40:d3:2e:25:ad:49:21:9b:c5:12:7d:f5:56:
                    20:75:02:44:0a:84:cb:9c:7e:8e:d1:da:5f:8a:c6:
                    fc:20:42:b9:90:37:ed:c1:5c:b9:d1:8c:66:c9:08:
                    a8:9d:9a:6d:df:31:48:49:e1:e0:99:cf:43:2c:94:
                    d8:fd:f7:a0:ca:5f:41:30:c4:3b:ed:85:b4:6d:65:
                    68:30:75:5b:7d:97:67:93:ef:1e:a8:92:74:6e:c5:
                    03:0e:0d:41:d4:93:a2:d8:f5:c0:c7:aa:31:7c:4f:
                    6b:6d:0e:7e:6d:f6:1d:ee:55:4b:d5:cf:d7:41:99:
                    14:b6:28:68:19:17:ee:3b:92:52:5e:e5:33:f3:e2:
                    30:6e:7a:64:03:b9:1b:b6:3d:d7:d9:8b:bb:0a:ef:
                    73:d5:5f:a9:ee:33:c5:54:8d:07:d9:01:be:29:60:
                    ab:8a:3d:02:cb:8d:b3:30:2e:91:66:22:a3:e5:02:
                    25:a9:0a:dc:0c:31:86:41:74:1e:a3:ae:cf:62:a1:
                    4f:30:8d:ba:a8:52:8b:12:9c:3f:5e:ef:6c:32:c5:
                    6f:af:dd:2e:ca:77:4d:50:20:4c:cb:fd:40:74:82:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.70.176.0/22
                  195.130.222.0/24
                IPv6:
                  2a02:65e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35798

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:10:e8:e2:85:e7:76:35:9a:37:39:53:bd:b7:d5:b5:fe:
         89:1b:ff:b0:74:30:ed:84:96:3d:bf:ed:a5:95:d3:57:e5:47:
         0b:98:e3:2d:7f:4c:88:90:73:16:f7:99:c0:f6:eb:cb:1b:2f:
         9e:43:0e:6e:da:31:a2:b6:63:1e:6c:06:c5:d8:00:cc:05:0d:
         e2:d0:6e:1c:77:0d:13:6a:b8:ec:c3:c3:1f:66:ec:32:27:84:
         12:12:84:e9:f6:ff:ee:58:08:1e:47:c9:a5:55:8a:aa:dc:39:
         a7:7b:35:c2:6f:b0:e9:06:20:07:1d:81:15:5f:28:a1:80:4b:
         e3:a7:36:bd:56:20:da:f3:bd:22:da:cd:ab:98:6c:90:cb:1e:
         e3:77:f0:ce:b1:5e:8d:4e:92:12:f9:ba:2e:6d:0a:90:cb:98:
         7e:da:b3:e3:f2:04:26:aa:cf:7e:a4:2d:b6:11:63:12:ff:21:
         32:2b:a9:82:64:11:e8:be:9f:a4:e4:d1:3f:c9:9c:01:b7:8f:
         a8:26:41:fc:7e:95:31:12:be:0a:a8:8d:d0:88:ff:b1:93:34:
         26:8f:77:bb:83:04:e8:ff:65:09:b2:5e:7d:22:da:af:bf:3e:
         84:ec:44:b2:7b:8f:33:9e:7f:df:d6:ce:5a:b8:45:42:80:27:
         85:7d:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----