Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
File:                     dBjDbQQYIfhrONMiPUP-XNsgEaA.cer (raw, json)
Hash identifier:          OJvK+8xoNJMBV26v7AShzuzFQJujVAMeqepaQAe9XA8=
Subject key identifier:   74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274873E2FF2857C6A106CA9DFE4F6FD2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199136
                          IP: 78.31.160.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:73:e2:ff:28:57:c6:a1:06:ca:9d:fe:4f:6f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:5a:52:19:a2:f8:bd:d8:92:a0:72:1e:f0:
                    c5:bb:26:16:7e:4d:d0:b6:53:c8:b9:72:e6:14:a0:
                    dc:86:d0:8e:5c:08:eb:ef:83:bd:2d:fe:1c:2e:d0:
                    61:79:bf:b3:ee:1b:56:7d:0a:d4:82:53:9e:6e:dc:
                    cd:14:34:b1:92:a1:0a:82:40:60:b4:26:fb:96:29:
                    7b:5c:d2:b2:6c:8a:b8:0b:2b:15:bc:2f:6e:f4:22:
                    e7:0e:19:67:2c:fb:42:9e:a4:e7:f3:71:0d:15:b5:
                    24:98:d8:43:a6:38:f7:4e:1e:7a:c9:56:df:8f:c9:
                    96:e7:db:8c:09:c7:da:fc:fb:b7:ca:a6:2c:d9:04:
                    10:59:47:03:ce:54:ae:8a:be:f6:ae:c8:66:9f:b7:
                    92:7d:f9:35:1c:b2:43:c2:09:35:ac:70:0a:dd:ad:
                    d0:ff:21:21:57:e3:20:66:60:90:72:18:00:b4:74:
                    27:ab:c9:14:a3:3e:5b:11:0f:fc:b3:71:2f:24:7e:
                    e8:85:35:48:dc:16:ce:1a:b6:86:83:c7:a8:7a:2c:
                    b3:79:1f:30:38:8f:57:f7:ea:26:c3:d0:dd:c9:10:
                    fa:9f:9d:a3:d0:a9:5f:89:7d:f1:4e:d4:fe:88:50:
                    92:2a:0f:5f:71:4e:ac:85:0d:d4:d5:15:15:8c:a5:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.31.160.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199136

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:e7:f4:ca:a3:b4:36:8c:1f:d7:51:fa:6e:26:b2:e7:9b:
         0a:c4:9a:83:bc:a0:c7:d2:8c:59:4a:b4:e5:f8:74:f5:96:dc:
         86:a1:38:76:27:4b:71:57:63:6b:ef:0b:9e:39:6c:9e:ba:72:
         11:66:2f:8a:25:77:fc:9b:90:be:14:57:ac:19:3b:da:5e:7a:
         6a:66:b2:bf:e9:81:3e:01:02:10:5e:a3:36:61:24:35:43:37:
         82:22:05:f1:06:08:61:b4:ff:99:1b:40:b4:28:ef:48:b9:3c:
         8c:04:5f:d7:c5:ab:ab:8f:08:6f:30:ba:d6:29:e2:a6:74:b5:
         52:52:76:8e:fe:b0:5f:ea:8b:5d:15:ba:5e:cb:97:58:66:ce:
         33:53:dd:e2:b9:20:60:62:f4:28:c2:76:3d:20:8f:bf:06:78:
         88:bd:18:0c:84:a4:55:d2:06:40:a1:25:e1:db:ba:dd:5b:c2:
         66:31:07:f1:27:17:b4:e5:12:46:c8:45:99:52:58:d8:0f:b9:
         3d:dd:50:39:e1:a9:28:31:13:18:74:76:3a:52:fe:46:8a:dc:
         f5:53:ca:3f:f6:ba:75:bb:60:b1:67:8b:51:ef:32:6a:a2:7f:
         57:01:b1:1d:b3:cf:4d:b5:a2:8e:f2:23:d8:ee:ab:8b:b7:9f:
         5f:1e:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----