Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
File:                     v42FRzQuL8ns-t_O8Azyc--dbpA.cer (raw, json)
Hash identifier:          MVBgsn5/bMQHdnh+efwQlYRDF8VYIsI/DgmpqVMHIIU=
Subject key identifier:   BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1E9F2C78882765A7AD37399E0E6FD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214405
                          IP: 212.32.45.0/24
                          IP: 2a01:fe00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:e9:f2:c7:88:82:76:5a:7a:d3:73:99:e0:e6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:1f:b6:5f:59:69:06:c9:8e:d0:ab:96:99:
                    99:f6:1c:bb:9e:33:ee:f9:a9:31:c3:be:d3:65:0b:
                    c9:d0:58:5f:56:0a:b1:e5:e1:6d:5c:9b:a0:d7:81:
                    8a:2f:12:b8:1b:33:2b:b3:86:be:95:8b:a9:a3:67:
                    a9:8d:86:7a:af:43:0c:75:7b:84:11:8b:82:23:15:
                    76:19:98:bf:a5:92:ec:bd:ef:33:13:d6:26:35:5c:
                    9d:12:48:ce:13:fc:1b:c5:9c:a3:64:9d:06:68:01:
                    38:4f:33:03:a1:bc:ea:dc:2a:72:c0:98:81:84:d1:
                    9e:fb:2c:f4:d4:7f:6d:42:00:18:63:9c:83:8d:7c:
                    40:54:13:17:aa:3a:5b:3a:6e:0e:a1:09:22:e3:04:
                    4e:38:12:6d:79:aa:a9:04:a6:ec:37:2f:0b:37:c8:
                    63:89:19:9e:9e:fe:1e:18:c3:d8:18:e0:5d:13:39:
                    4e:78:25:5f:83:0f:ed:73:f9:04:b1:30:f2:e1:31:
                    f4:94:9e:62:09:b4:6e:c0:0d:3a:49:03:bf:f9:81:
                    3f:1e:b9:21:76:f6:d9:0e:0a:ef:09:cd:94:52:fc:
                    3a:f9:fd:44:04:ea:8c:ae:81:77:1f:b1:da:7a:3b:
                    a2:55:32:a9:ea:60:06:20:39:51:f3:60:f3:9b:2c:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.32.45.0/24
                IPv6:
                  2a01:fe00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214405

    Signature Algorithm: sha256WithRSAEncryption
         3d:d9:c2:a4:a3:75:69:9a:53:a7:78:8d:cd:12:39:46:8e:f6:
         fd:c5:a5:89:7a:bc:a6:d0:5a:1f:9f:fb:61:2c:b1:b4:b6:0a:
         7f:3a:73:03:ee:46:29:38:fb:3d:b7:bf:a8:da:ef:57:e9:e2:
         2b:fa:8d:4a:86:e1:6f:aa:ce:e7:5c:3a:2d:fa:45:6a:11:be:
         f3:09:72:42:cd:05:59:80:c6:82:b9:52:82:1d:f3:50:ba:4d:
         55:85:da:33:49:9e:0c:55:d1:49:c0:6c:bb:73:2b:36:e8:5a:
         d3:c2:7e:bb:19:82:13:65:57:fb:28:9f:52:d4:5c:39:9f:62:
         f6:21:52:9c:63:34:b9:34:21:d2:6a:1f:09:fe:0e:48:3c:b3:
         94:a7:70:91:06:6e:71:cb:e8:2a:36:b2:44:78:21:e8:2b:ef:
         fa:74:28:27:33:da:91:5f:68:ad:b5:7d:48:3d:ab:e5:30:e7:
         dc:cb:0c:3f:7c:b8:24:89:4e:a7:a4:90:61:77:cc:e3:bf:e2:
         26:68:60:de:85:01:f4:e3:42:df:3c:39:e8:aa:28:57:eb:6a:
         f2:f1:b9:fa:7a:75:a9:c4:f9:85:a2:5d:a5:04:b2:4c:be:58:
         4e:76:3e:7c:97:28:f8:6a:56:6e:23:74:d9:67:10:22:6f:f2:
         38:a7:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----