Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
File:                     jdADrwR3TdPjlzBJeYmjoXFRYlI.cer (raw, json)
Hash identifier:          73c3pZjOwT9Op7CwrDzXMNsGIjndJWQwiPz/3tNxqE0=
Subject key identifier:   8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7445AF8F1238A861E43AAB044D852
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211649
                          IP: 185.251.71.0/24
                          IP: 2a10:af40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:44:5a:f8:f1:23:8a:86:1e:43:aa:b0:44:d8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8dd003af04774dd3e39730497989a3a171516252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:97:c1:f0:63:b3:fd:c0:03:ac:fe:e9:8f:
                    1e:68:de:6e:82:dc:e6:c8:3d:85:43:21:86:06:0e:
                    5b:ca:13:2d:86:a4:91:07:d4:0b:f8:2e:3a:b3:55:
                    98:9e:fb:b3:c5:2d:9b:1b:ff:3e:3f:1c:b3:02:8d:
                    3a:10:f3:78:9b:df:26:f0:a1:bd:a6:07:62:64:6f:
                    3f:e8:41:1d:5e:11:e1:80:ad:dc:e9:6d:c8:4d:45:
                    9e:38:3a:ac:62:28:84:e9:fe:08:e0:0c:c1:3a:18:
                    d8:d7:4c:8b:6d:ab:ef:48:07:e6:08:cc:64:b4:3e:
                    3c:bb:30:42:c9:ef:f4:f2:7e:dc:c5:33:e1:a2:8d:
                    9e:e0:04:be:1f:57:ea:e8:35:e0:22:83:18:ea:b6:
                    9f:6f:6a:ff:62:df:26:46:82:20:79:22:ed:74:af:
                    4b:99:74:47:2b:a0:6f:4f:47:dd:9c:3b:d2:7d:ff:
                    7f:66:19:fb:c8:61:3d:cc:2b:a3:0e:5f:28:d5:2d:
                    c8:97:59:71:94:aa:e2:84:5d:65:c5:40:10:86:ab:
                    43:24:74:4a:85:36:e8:25:1c:e2:95:28:09:cd:87:
                    af:d9:e0:f3:a1:f0:87:e5:3d:03:6b:b4:09:6d:a1:
                    9a:96:c8:78:0e:99:51:87:bd:ad:3c:e2:a9:33:84:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.71.0/24
                IPv6:
                  2a10:af40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211649

    Signature Algorithm: sha256WithRSAEncryption
         32:13:b8:2e:fb:5e:26:8a:be:6d:c1:59:0c:53:f4:3e:11:03:
         6b:96:7a:77:67:cc:a8:5a:d8:9a:c0:7e:9f:f7:a2:8c:60:bf:
         af:3f:3a:10:63:e5:3d:0f:59:da:c2:1e:8a:b4:d4:a4:03:0b:
         ac:98:f1:94:c3:64:b8:89:ae:b8:cc:73:2e:3a:66:26:98:02:
         e0:e5:c4:8d:73:81:62:01:9e:be:4d:0e:98:22:93:68:fc:ac:
         4f:13:70:8d:89:93:5f:c5:d7:70:d2:33:db:51:b5:9a:fb:03:
         1a:eb:76:3d:cd:ed:d0:a3:30:70:62:95:07:5c:95:c3:95:d7:
         3a:4c:bc:64:60:44:1c:4b:45:2d:fd:5d:ae:f3:86:1f:5f:94:
         23:a9:05:f4:8a:0d:32:65:a1:b1:9b:7f:ef:e3:f5:cb:ef:ee:
         28:38:1f:71:6e:a3:0f:03:ca:2d:e5:b9:28:2b:d6:15:f2:42:
         fc:1c:37:61:c5:5d:8b:38:90:53:62:a8:c4:26:f5:58:94:a1:
         72:68:b4:77:dc:d1:db:01:14:5e:1b:9d:67:b3:99:a8:82:e9:
         f0:1b:a7:af:37:3a:7c:3e:ad:40:45:72:22:e6:64:1c:77:62:
         5c:7d:f1:a4:49:06:92:7a:8e:22:c8:a8:2d:b7:46:48:80:89:
         a2:25:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----