Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer (raw, json)
Hash identifier:          Y/0XbK+/xp3IAEtWcl8WRhl/Gdoc4YjKu6FCYSXVO18=
Subject key identifier:   74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425219456FD57269BFDBB66DB2AB43833
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59767
                          IP: 185.34.4.0/22
                          IP: 2a04:5d40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:94:56:fd:57:26:9b:fd:bb:66:db:2a:b4:38:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:44:32:6d:f2:f8:dd:9a:60:b7:77:d7:e9:
                    3e:1e:11:36:af:96:cb:31:f3:a7:1d:4c:5d:08:5c:
                    c1:28:48:68:12:2f:9d:6b:90:c7:ec:02:12:dc:85:
                    34:2c:60:0a:58:77:57:4f:8b:d9:df:ff:83:f3:ea:
                    5e:df:9f:18:04:fa:42:35:e0:cc:fc:26:b7:28:69:
                    7e:49:43:7c:ef:f5:ba:a4:88:de:36:b1:ec:af:5b:
                    bd:c1:59:68:54:71:c5:2a:01:1a:03:1e:c9:1b:cb:
                    77:f9:fe:9b:43:cf:fd:17:85:e2:ca:47:d0:e4:2c:
                    f6:af:94:66:88:20:75:0f:19:df:62:25:42:43:af:
                    a8:61:38:d0:cf:72:57:e6:f3:5c:f4:32:06:ba:a0:
                    83:c7:cb:39:b4:d6:37:2a:9c:e7:98:8d:42:fb:e0:
                    66:31:e3:bd:25:6a:13:80:c5:2c:23:04:26:73:8d:
                    36:87:62:72:05:68:d3:40:a2:2e:4c:53:54:83:a5:
                    c5:14:da:8a:57:80:78:eb:8e:77:33:77:8d:d1:6e:
                    e7:54:ef:21:aa:eb:5a:9b:ca:df:6b:52:7f:03:d6:
                    08:23:20:4f:a0:37:7b:7a:2e:86:54:38:4c:af:a4:
                    1e:85:c2:3f:48:9a:72:36:3b:d3:1b:eb:2a:ce:5f:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.4.0/22
                IPv6:
                  2a04:5d40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59767

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:a8:fa:ee:fd:51:89:3e:02:e2:41:7a:f7:26:74:1e:0b:
         ac:78:c0:90:5c:28:0f:46:83:69:c4:f8:0c:a2:97:9c:ff:a0:
         76:a8:cf:79:34:0c:05:a9:46:fd:6d:f5:37:83:eb:bf:68:0a:
         98:23:a9:47:72:e8:85:18:65:ac:66:d5:ea:b6:1d:c4:6d:53:
         92:5c:de:97:42:e7:5e:73:c5:37:1b:3f:ab:6f:04:e6:58:24:
         3a:9f:9a:9b:53:e5:38:30:64:ff:30:cd:e5:ff:d7:d6:6f:ec:
         67:63:62:08:ee:e5:a5:fd:28:03:ac:bb:6f:66:20:f0:70:09:
         dd:8a:3a:a1:a4:97:9f:6b:d1:7e:f6:8d:22:53:2d:e7:b1:ff:
         67:38:27:aa:4d:17:3c:62:bb:12:84:d1:5b:6c:6a:2a:2f:32:
         8a:4f:6e:d5:84:d7:44:c2:51:9f:e0:07:0d:ec:79:e9:93:37:
         92:d6:31:5e:cc:5e:3f:99:e2:46:7a:c5:34:5d:b2:d0:cd:e8:
         6c:d4:13:7f:4b:8e:6a:e9:7d:35:8e:66:ac:cb:16:02:c6:ed:
         85:df:02:1e:fd:f7:58:d1:20:a1:cd:28:bc:39:1f:9c:b6:c9:
         9d:a3:39:e4:59:d7:3c:7f:b0:14:ab:f8:4e:b7:82:30:50:b0:
         b2:a1:6e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----