Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
File:                     fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer (raw, json)
Hash identifier:          5F1mP26CLo+/HjwcdX0RyOs2yfkgdX3natr5FhIRKZU=
Subject key identifier:   7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA31610FB0A030647F70AF08B774A7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201220
                          IP: 185.46.24.0/22
                          IP: 2a01:8420::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:31:61:0f:b0:a0:30:64:7f:70:af:08:b7:74:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:df:ab:0b:de:cd:7b:c0:f1:58:85:f9:cb:
                    c6:c1:54:f7:af:a6:98:45:ee:b8:d7:29:cf:af:c1:
                    dc:d5:5c:b2:3b:a5:80:27:12:43:98:bd:e9:3f:3c:
                    d1:d2:d9:c1:3e:fd:2b:aa:9a:92:9a:f5:6d:cf:4d:
                    1b:b4:9d:7d:72:ad:f5:eb:59:24:4b:2b:b2:c2:0f:
                    4d:ff:7c:bd:cf:15:39:00:40:e3:09:1d:ba:fd:ae:
                    63:03:65:d7:56:1c:4e:36:14:52:0c:d2:b0:c9:f7:
                    53:df:0e:36:21:68:1c:f8:9e:93:40:3f:5d:f8:e4:
                    c9:d9:98:e3:58:22:8c:5d:56:ca:46:c5:d9:31:d8:
                    66:0a:5b:fa:ef:03:9e:31:93:1f:4e:de:b7:9a:bf:
                    95:41:83:a2:2d:9d:3b:d2:11:0a:8f:8e:3c:8b:0c:
                    0f:61:7f:07:c2:ec:24:09:b8:f5:c0:50:3a:26:d0:
                    61:81:5c:f9:2f:00:6b:fb:33:23:e1:dd:c9:45:ca:
                    3a:ff:57:26:e8:34:e0:9d:b2:38:41:a1:b0:4e:3d:
                    c5:7e:30:7e:47:56:14:3b:16:56:63:aa:00:47:58:
                    33:da:a6:db:11:fc:3f:2f:7b:15:e8:0a:98:d1:b7:
                    d3:2f:d6:57:f4:94:4a:39:a4:c4:1a:3c:74:64:3f:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.24.0/22
                IPv6:
                  2a01:8420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201220

    Signature Algorithm: sha256WithRSAEncryption
         5b:8e:1f:c4:e5:d2:96:f4:6d:7c:24:38:7b:03:22:88:8e:92:
         99:6b:67:f0:8f:53:62:02:63:69:f6:c4:fc:89:27:e9:92:54:
         c2:05:3d:7e:1a:f8:36:5d:f3:85:f6:75:74:5a:04:25:5c:ca:
         f9:dd:c3:bf:cc:6d:aa:a0:b5:68:d7:e4:43:1a:4a:5f:8c:01:
         ae:a5:47:53:92:5f:c6:cf:e2:06:f7:73:d1:7f:5f:39:63:ee:
         47:78:99:b9:e4:2c:51:14:b0:3c:50:6c:31:cc:99:6d:36:ba:
         14:4c:44:47:e5:6f:26:21:2d:1e:98:11:bf:6e:b3:a3:95:04:
         23:d1:90:ac:a9:9f:f2:d7:75:3b:0e:67:24:f1:0b:80:1c:3e:
         0a:50:c0:f2:d8:5e:4b:99:5f:19:7b:77:dc:a6:a9:cb:ff:6a:
         06:8e:03:00:31:28:da:6b:75:11:ed:36:08:ea:77:c6:ae:c4:
         69:a7:93:3b:98:91:3e:69:b9:46:f8:3c:ab:88:ae:c5:59:21:
         7b:43:91:ad:29:64:cc:29:c2:96:3a:fc:db:36:f4:e9:d0:6d:
         1f:c8:5e:41:ec:74:39:f1:14:d9:9b:11:42:6c:17:af:0e:8d:
         e3:f4:f6:c3:1a:50:d7:56:10:6c:c0:16:71:88:0b:b6:29:b6:
         7e:68:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----