Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
File:                     dlIO_x7h4o493PuJ58tvfYmnfJw.cer (raw, json)
Hash identifier:          tjXwnsmUWg2oSY9IhrB5cLja0E7s1KV3pv6w0XvReM0=
Subject key identifier:   76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195C83B8A149C8B92D8227F248BC68B4C75
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Mar 2025 12:58:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34565
                          AS: 211877
                          IP: 194.42.47.0/26
                          IP: 2001:7f8:161::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:3b:8a:14:9c:8b:92:d8:22:7f:24:8b:c6:8b:4c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 24 12:58:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:0d:73:48:8b:19:d9:85:c0:20:c1:2f:e5:
                    c7:97:f3:17:38:cb:72:5e:96:aa:ce:61:f0:a3:85:
                    f4:28:af:37:da:4e:25:3c:22:79:15:dd:b8:17:21:
                    c6:62:ee:0f:94:07:ce:af:4a:54:61:d3:b8:5c:53:
                    4c:b7:70:88:df:12:f8:8a:85:15:d4:22:8e:4d:c4:
                    b1:99:07:fc:01:a9:7f:08:d8:ac:22:47:08:c7:a3:
                    91:3f:eb:00:34:cf:a9:87:b6:b9:1d:6f:e4:ff:6e:
                    42:69:af:23:d4:c6:17:6f:5f:89:6d:4b:61:58:58:
                    1a:61:c1:02:35:d5:3c:f4:2e:42:0f:13:87:41:4d:
                    a4:9b:ed:c8:8d:0c:74:3e:0e:e2:7a:21:32:37:68:
                    d0:6b:b6:c3:d7:5f:53:ab:70:b4:4c:44:50:ec:8f:
                    be:6a:f5:70:6a:47:db:6b:f2:80:ae:40:71:ad:55:
                    3f:8d:16:4d:3d:c2:b3:0c:7f:49:e2:5b:3a:ef:99:
                    3a:2c:f8:91:74:42:d8:59:99:8d:d9:39:e0:d3:c6:
                    85:18:ab:b3:b1:3b:5f:b6:11:b9:40:b5:43:45:23:
                    d7:d9:6f:a7:ea:95:6d:3a:59:20:c0:65:d7:62:ca:
                    83:e4:5d:69:74:d3:10:af:5e:28:f3:73:17:10:0f:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.42.47.0/26
                IPv6:
                  2001:7f8:161::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34565
                  211877

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:08:d9:ba:c4:33:a6:85:68:f6:73:e7:49:38:46:09:17:
         e6:3b:72:3e:dc:18:d2:49:b5:57:64:6f:aa:26:f8:3c:69:02:
         b1:01:e9:b2:18:3c:cd:53:c3:44:7f:d2:8b:d3:06:b5:6f:6d:
         98:1d:23:ba:12:af:82:41:2d:dd:f4:fe:74:40:18:01:5f:a2:
         cc:73:21:d1:f3:9b:89:4b:24:53:7c:5b:83:cd:58:7d:51:db:
         ab:4d:cd:b5:41:43:d8:a8:cf:35:8c:0a:bc:1e:52:e7:f9:1f:
         d6:e9:43:d0:9e:e5:34:b4:46:72:bb:c8:57:53:e4:43:63:25:
         86:98:87:ed:1e:83:a4:f7:c5:45:5f:00:bf:a7:b0:94:c6:28:
         21:36:f0:b5:03:f0:25:4d:20:ef:54:05:b5:f9:04:c6:fb:4d:
         9a:bb:eb:c1:b1:bd:c0:32:f6:ed:a0:01:86:29:9a:83:82:bf:
         02:02:fd:f4:15:53:c4:3a:26:cb:5c:e0:a9:84:c9:d0:e7:36:
         87:a8:c5:a8:75:ed:85:de:c5:e5:54:8f:87:fc:54:d4:8e:f6:
         8c:f2:a3:01:8d:6f:e5:fd:e9:e5:af:8a:e6:f3:31:a6:db:1b:
         8d:d8:1b:d6:6b:d5:ae:b8:e2:e9:48:f3:9a:fc:08:be:0d:50:
         0b:a9:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----