Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
File:                     duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer (raw, json)
Hash identifier:          7Jh8zyYh3ZFu4bDWtij8GgIWMY8tgPI6x04iO49O1sY=
Subject key identifier:   76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206852D38CADB9F448BD86A36C344712
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44761
                          IP: 195.28.18.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:52:d3:8c:ad:b9:f4:48:bd:86:a3:6c:34:47:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:68:70:aa:0a:ab:bf:10:cc:d3:bc:6d:72:
                    91:01:55:f9:15:44:1b:4b:6f:22:70:85:9b:f1:96:
                    64:17:fa:0c:d0:3e:2b:ef:83:89:b3:17:0c:4b:e6:
                    c7:b1:38:be:1f:56:18:09:5b:9f:29:e4:3f:c3:b8:
                    fd:8f:23:49:64:54:70:a1:e8:07:98:ca:77:5d:44:
                    f8:b5:4e:65:23:b9:04:22:1c:72:21:7d:b7:dc:07:
                    2c:2b:19:f7:2c:5d:6c:75:c3:fe:b8:98:e0:b9:f9:
                    95:7e:b9:28:1c:2a:b1:6f:62:3a:3b:18:be:d2:44:
                    f7:ec:9d:91:63:57:9b:48:04:f4:8a:6b:93:90:c5:
                    ef:9b:38:e5:bd:2a:d3:d0:7f:7c:bb:92:7a:92:7f:
                    86:58:62:6c:65:94:a7:05:02:e0:e0:06:24:a2:b0:
                    ac:fc:91:25:8c:5a:e0:52:35:d8:ca:5f:e9:f5:57:
                    16:88:59:d5:7a:74:d2:df:11:b0:1b:0a:21:f1:b3:
                    78:81:2c:84:1d:2c:bd:74:f3:54:e1:e2:1a:be:e3:
                    35:11:94:95:03:2d:53:f5:29:6c:b1:69:33:14:64:
                    a0:d4:01:1f:36:3e:38:de:cd:91:7f:24:9f:88:cd:
                    a2:7f:f8:9c:ea:8f:6b:49:e6:54:1b:13:44:9c:f8:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.28.18.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44761

    Signature Algorithm: sha256WithRSAEncryption
         02:0a:df:57:fb:55:76:97:16:4b:a7:7a:ec:c9:a2:55:2e:33:
         9f:5d:c6:f3:97:e7:fc:e9:fc:fd:97:5d:f4:8c:6c:c5:fd:09:
         34:d4:10:cc:b8:b3:b6:4b:f1:8f:7b:9f:7a:27:e0:31:70:61:
         e1:68:67:c2:03:94:da:e1:e7:6b:38:b6:d6:6f:80:17:79:9b:
         94:47:06:e0:f8:d4:30:87:7e:c8:e8:d9:64:52:73:6c:8a:00:
         cb:2d:52:0b:6a:8e:90:3e:50:ac:d3:b2:51:87:a4:d7:58:6e:
         ad:9c:de:6c:54:ad:2f:33:0a:56:9f:11:32:f9:ae:96:91:a8:
         b5:66:99:e4:46:48:1b:a9:4d:27:a5:4d:d5:83:af:1c:7a:10:
         aa:16:3d:65:2e:ff:3f:4b:9e:f4:99:65:a8:f0:99:4c:a2:83:
         6d:94:3a:b1:1b:67:e5:85:be:bb:7d:fc:91:55:11:b2:86:6e:
         42:38:18:38:18:c8:3d:46:62:a9:46:6b:b1:51:f1:d5:b9:5b:
         27:7c:5a:50:86:c2:99:ab:6e:b0:79:80:18:66:0c:03:4e:86:
         62:93:ba:6b:7d:81:0d:da:82:31:4c:84:04:d4:31:06:41:91:
         bc:34:1a:2a:37:f5:19:c9:b6:86:4e:2d:d7:ca:6b:dd:13:b3:
         19:a8:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----