Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
File:                     dciLHEH7612r73Q8V6zf_E-nRpk.cer (raw, json)
Hash identifier:          OGuSYmOPmeDdfDG9/o00+c8Lvp9G6ZvCcJ6H5NQUhAM=
Subject key identifier:   75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FF4F382217C17677E98608CE279A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211694
                          IP: 185.244.237.0/24
                          IP: 2a10:a240::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:f4:f3:82:21:7c:17:67:7e:98:60:8c:e2:79:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:34:7c:22:76:1c:f4:91:c8:13:97:0f:72:
                    51:af:ee:fb:9f:f3:22:fa:68:d0:1b:39:65:61:88:
                    f6:08:e7:24:79:e5:51:0a:11:32:4c:7b:8d:77:6a:
                    c8:91:df:fc:51:70:52:40:7c:2e:57:0d:ec:6b:c7:
                    c2:6b:8c:f3:bf:cc:b6:c3:6c:64:74:6f:c7:2e:1a:
                    c5:5e:6a:63:9f:e0:de:78:69:c1:9f:f7:15:9d:1e:
                    24:4c:37:85:e7:01:5b:84:a5:7e:3c:47:c2:d0:37:
                    5e:5f:fb:61:66:82:77:b2:66:83:5a:5f:76:cd:ce:
                    35:9d:a6:17:bc:c5:d3:e1:7b:1a:6b:7b:16:df:6c:
                    a6:dd:79:39:02:f2:a0:e1:31:2b:74:ba:3b:87:37:
                    97:2a:1e:e3:ee:22:29:21:7a:3d:1c:fd:1d:8d:fb:
                    68:1f:0d:57:f7:5d:52:d3:4b:36:93:07:90:78:ee:
                    ff:c1:77:74:05:30:ea:b5:62:3a:a7:67:82:3c:f5:
                    90:b4:da:cb:e8:f4:bb:ca:fe:d2:bc:83:84:86:c8:
                    f5:c0:1c:92:b0:d9:a0:49:f1:00:8e:c2:ce:ca:f6:
                    85:ef:13:07:a9:31:94:05:cd:f3:07:df:88:52:d9:
                    10:0d:26:8e:84:e3:a6:9d:16:7a:a1:2a:77:33:52:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.237.0/24
                IPv6:
                  2a10:a240::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211694

    Signature Algorithm: sha256WithRSAEncryption
         39:04:b4:06:e5:b4:3c:4b:b1:ec:29:b4:25:d3:60:dc:b4:e7:
         7c:0d:9d:f8:16:82:9e:b2:6c:3d:9d:40:13:a7:b6:17:06:89:
         f5:c3:7b:3e:73:0a:18:5f:3f:5d:cb:ff:49:33:b1:c2:81:87:
         b1:74:ba:61:6d:3c:35:e3:9f:e0:35:d5:40:bf:8a:d3:1f:ed:
         54:5d:a2:91:8c:fc:34:fa:64:95:e1:09:6c:b3:c5:a1:09:76:
         bc:97:32:49:cf:d9:95:cd:78:88:7f:6e:b1:44:d1:9c:cf:79:
         ab:6d:07:59:58:0c:b3:24:9a:c1:8d:10:4b:76:71:8a:2b:e5:
         30:7b:ba:ac:3f:2a:e8:57:a4:e9:5f:74:94:32:8b:90:0a:2a:
         b3:3f:93:f8:d0:a7:c5:b0:80:5d:31:41:45:00:54:30:7a:3e:
         6c:fd:78:eb:be:bd:b5:0a:b8:4c:e6:ff:af:a3:c0:63:9e:b9:
         82:59:73:bb:c7:64:3c:6b:a0:36:43:0b:29:e7:1e:ee:df:a6:
         75:6b:92:82:78:0e:3b:34:50:ad:f1:b8:aa:c4:6f:21:d2:2a:
         f7:26:7f:b2:0c:e1:39:17:8f:b3:27:14:5b:e8:b3:39:ff:f0:
         af:54:69:0c:c9:fa:52:43:05:39:aa:01:72:dd:70:71:e2:23:
         37:7e:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----