Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
File:                     CRzF2QybaBpstOdyzK6-w0L7mwU.cer (raw, json)
Hash identifier:          n0R1AMohYs05JMFXMox29GpdVByIn2nEMsUt1JzfQXM=
Subject key identifier:   09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D91E5D9CB3A4B66BA4DF5BCD1B9F4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 31175
                          IP: 185.117.204.0/22
                          IP: 2a06:8700::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:1e:5d:9c:b3:a4:b6:6b:a4:df:5b:cd:1b:9f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:74:71:61:f8:45:89:fa:8b:8e:fc:af:b9:
                    a0:d0:65:86:7e:32:0f:37:70:0c:28:ca:f5:98:40:
                    06:0e:41:cb:11:f6:ed:03:e1:32:1c:32:de:c9:20:
                    f1:08:d3:8d:77:2c:be:79:e0:cf:77:6e:40:f9:62:
                    fc:54:4b:c4:a9:3c:e4:15:d1:4b:85:6a:59:61:5a:
                    96:ce:3b:60:a5:de:24:19:79:99:9d:08:f0:12:fe:
                    96:fb:ad:7f:1d:d2:97:84:07:83:69:f9:66:70:06:
                    08:f6:5f:7e:9c:a6:0d:3e:61:eb:fd:97:61:b6:db:
                    65:a5:a1:27:d9:5d:28:d1:66:dc:d4:9b:39:3c:00:
                    fc:dd:58:12:c1:2a:05:d0:21:f4:a7:78:2e:b4:98:
                    f0:cc:49:91:82:87:bf:44:43:a0:9a:8a:c3:a0:f8:
                    5a:97:1a:e1:9c:26:fa:29:0c:00:77:3a:bb:8d:a8:
                    d5:ac:b5:3a:35:4e:7a:8f:01:ad:c2:a6:1e:d3:45:
                    f7:49:89:29:d8:b8:c3:89:59:11:53:57:b4:ae:8e:
                    1d:a8:7e:e5:72:2b:00:4c:c4:73:cc:2e:dc:08:21:
                    58:5f:3b:de:a8:f7:f3:73:6c:1c:ab:a4:a2:2e:44:
                    79:9b:e4:1c:0f:1f:6a:9e:b4:d6:ff:ef:4a:6c:62:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.204.0/22
                IPv6:
                  2a06:8700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31175

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:5a:44:bf:0d:a6:52:21:f3:67:88:e0:21:10:84:95:f6:
         01:9d:97:05:a6:81:5f:75:c7:2e:0e:a4:63:7c:ec:3e:e3:83:
         93:b6:2b:2d:f5:62:4a:57:0e:4a:a9:b1:0a:3e:49:d2:f1:33:
         fd:d9:d8:4f:12:a7:6d:6c:04:db:0d:a6:db:41:90:3a:ba:21:
         06:97:b1:20:1b:f9:71:4f:d9:80:f1:fb:e9:5a:69:59:12:a2:
         c2:15:06:86:ab:00:68:5c:97:2c:77:d7:e7:a0:c8:2c:de:b8:
         f2:78:9c:dd:85:f7:b0:0c:b0:07:47:55:ef:2e:da:a1:d8:50:
         a2:17:59:13:31:d7:72:86:5c:9f:64:a5:d5:7c:ee:6d:0c:e6:
         a2:2a:41:29:ed:da:dc:6d:e2:4a:6b:f3:ed:41:a3:46:1e:77:
         ce:8d:2a:c6:10:fe:89:88:c2:2d:7c:ba:54:93:70:c6:7e:7a:
         0c:cc:32:62:24:bc:1c:f4:6c:30:48:fb:20:f4:2b:80:25:43:
         b1:64:ca:e6:6b:dc:5f:1c:93:07:dc:d2:1c:78:23:d9:bf:27:
         cf:b5:95:90:6e:b2:00:3c:d4:38:e1:ed:4a:9c:6b:0f:86:3f:
         a6:98:e2:76:ed:0a:13:b2:8d:8e:2e:0f:a7:73:62:d9:2e:04:
         99:13:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----