Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
File:                     DdbvvlRnHXGlkFHimiRIzWr41Gc.cer (raw, json)
Hash identifier:          eRgUysh9hco/UnC/kRcX2ABiDqu1v7yR3fYN2AhIydo=
Subject key identifier:   0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5A6A174E540D97E57690CB2DED9CC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42888
                          IP: 195.130.193.0/24
                          IP: 2001:67c:2144::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:a6:a1:74:e5:40:d9:7e:57:69:0c:b2:de:d9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:75:a5:a3:eb:85:bd:8f:0e:c0:c7:a3:03:
                    e2:10:6c:e6:f2:ca:ae:03:83:23:b3:43:fb:7a:fc:
                    fe:94:0b:2f:0d:5a:a1:d3:d1:03:b5:fb:59:39:f6:
                    38:c9:5c:3e:70:00:fa:79:f7:f2:80:37:30:13:26:
                    04:78:89:88:f5:c3:a9:cb:73:f5:f4:af:a5:5c:ed:
                    f4:55:2d:4f:c5:50:45:a1:dc:4b:1f:54:29:1f:96:
                    d0:05:07:f4:c3:92:36:8f:97:70:87:0b:c6:36:df:
                    15:4d:47:dc:6e:27:cc:00:47:0d:85:40:92:35:f9:
                    a4:59:e5:e6:61:78:54:dc:a3:42:7e:83:ef:6a:99:
                    96:30:07:8a:a8:1a:d8:82:7f:04:7f:92:9e:c5:39:
                    e4:84:53:6b:6b:a1:6d:85:7e:5f:a6:6f:aa:14:83:
                    75:99:aa:40:f3:f2:12:78:86:8e:cf:d6:be:5c:0c:
                    35:e5:39:dd:58:d1:79:e4:99:a0:e5:39:53:56:0f:
                    c4:1d:19:f3:6a:3b:ad:7b:2a:63:52:3e:6d:77:a2:
                    ee:5e:4f:20:34:f6:e2:d9:4a:a6:a0:36:32:b5:d6:
                    8c:80:34:cf:dd:2e:7e:76:95:83:a0:1e:c6:f1:d2:
                    91:58:93:05:fa:42:15:8a:51:b9:cc:6d:da:97:f6:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.130.193.0/24
                IPv6:
                  2001:67c:2144::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42888

    Signature Algorithm: sha256WithRSAEncryption
         9f:a4:88:2d:73:5c:c8:c3:e0:92:62:12:d1:c0:e9:d1:c7:b1:
         d5:7b:ab:d5:63:5a:41:f5:7f:f4:78:23:5c:26:c9:bb:84:8f:
         25:d0:e0:a8:1a:d2:de:03:67:f9:54:96:d8:e2:eb:db:7f:e1:
         4a:10:14:ae:b8:f7:e3:5f:cc:17:76:b5:b6:21:1a:03:af:fd:
         2f:1e:92:6b:88:51:05:a2:79:58:bb:3f:b6:1b:fc:ff:27:f0:
         57:87:6f:c2:ca:38:c9:61:df:76:de:9c:1b:8a:09:a7:a7:fa:
         3c:6b:42:3f:77:99:4a:68:d7:86:9d:62:d1:d6:6e:65:c6:e7:
         c2:02:e9:70:b4:74:ea:39:e9:08:03:69:14:49:d0:7b:5f:ba:
         d0:10:af:45:bc:f2:10:e9:d6:e1:18:2e:ef:46:cf:fd:1d:4e:
         44:1b:7d:44:fa:28:e5:6a:2e:08:eb:ac:38:0f:84:7d:fa:69:
         bc:69:ba:a2:02:9f:a7:70:18:46:66:ae:f8:c5:3a:4e:3f:4d:
         a7:50:06:cc:a8:db:2f:1c:ea:ed:d5:b9:63:25:97:f1:a7:bb:
         da:06:50:cf:8c:27:4d:d0:e0:27:ca:17:a1:d6:73:16:ba:24:
         02:35:74:2f:e1:a7:40:14:54:21:a8:90:14:c6:4a:02:56:1f:
         ac:58:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----