Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
File:                     tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer (raw, json)
Hash identifier:          XyLCMA3P5vlEcdoVAfpJWFCcvZ8Z09f7J5g2TBRdzF8=
Subject key identifier:   B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA5DB0FB8B082E9672FBFE212C69C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205684
                          IP: 195.34.78.0/24
                          IP: 2001:678:d04::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:5d:b0:fb:8b:08:2e:96:72:fb:fe:21:2c:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:da:c3:9a:3f:8d:7c:50:c9:67:36:c2:b6:
                    83:e7:7c:f6:04:bb:a1:c2:70:83:85:ed:07:63:dd:
                    cf:20:b6:18:54:2a:4a:76:2a:82:68:a8:9f:cc:57:
                    eb:75:b6:20:72:2b:3c:ec:af:55:21:20:61:6d:f9:
                    e6:19:f3:17:76:31:5d:c3:18:ee:6b:d3:a8:8f:28:
                    81:70:61:26:11:11:46:57:6a:d8:0d:7f:a2:a1:74:
                    68:55:8e:74:3c:ea:f1:05:e0:6b:85:2e:94:70:f9:
                    ac:ee:51:da:40:a4:70:2c:31:f7:5f:d1:f2:0b:5a:
                    ff:87:ff:3c:19:09:8b:54:bc:c5:40:57:43:68:3e:
                    9c:dd:7c:dd:83:f1:dd:f2:cb:7f:86:4a:c2:40:27:
                    80:7b:c2:d5:d0:a1:4f:51:84:9d:cc:f6:0d:92:4c:
                    82:78:68:8a:05:6e:49:70:2e:c6:21:0c:13:b9:6e:
                    02:bb:b8:32:d1:50:e8:b2:15:51:77:f3:00:85:2e:
                    ab:bc:e9:4e:85:80:c2:e0:18:19:dc:99:69:14:72:
                    3b:ba:c1:40:bf:00:dd:0a:b0:89:ee:56:5b:84:e4:
                    63:41:73:10:78:ae:0a:e6:a6:5e:2d:e9:d4:24:c2:
                    6d:3e:d6:f5:fb:dc:d3:5f:a4:68:78:be:b9:d8:8e:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.34.78.0/24
                IPv6:
                  2001:678:d04::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205684

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:41:8c:50:3e:b9:c7:57:54:75:c6:81:5d:da:4d:94:75:
         9d:6f:6e:7e:33:41:42:9a:29:75:a2:d3:04:14:73:43:94:54:
         5e:69:ad:e9:94:27:b1:78:cd:23:9e:b2:26:ff:d1:29:d7:ba:
         28:63:ed:f2:e1:24:0b:3b:2d:80:84:49:0c:d9:b5:cc:3f:d3:
         c5:56:82:2f:e7:f2:11:5b:b9:54:95:38:23:12:72:6a:38:07:
         a3:59:71:71:98:31:63:db:c8:d3:9c:49:55:89:b4:05:74:6f:
         da:86:cf:41:76:1a:85:6b:a4:6e:2f:b8:ee:fd:2e:b7:6c:2c:
         7b:9b:7b:c5:12:10:23:7c:a3:49:f7:1a:05:57:4a:1f:44:9e:
         92:72:d7:88:ff:d5:26:b3:37:be:c0:2c:8b:d2:a8:4f:77:f3:
         cc:c2:c2:b3:da:09:7b:63:d3:1c:bf:2a:97:be:98:ed:ad:5a:
         22:93:af:96:65:40:c5:9f:75:51:48:3c:bc:6a:ae:0c:da:c6:
         d4:8c:a9:e9:ba:44:c2:20:36:be:6b:d9:b5:b6:9e:9b:bc:ff:
         82:ab:3a:d6:10:7a:27:29:81:85:a0:81:2b:6c:61:1b:15:39:
         6d:bc:c6:04:e4:88:dc:32:76:a4:c8:fc:70:27:21:4b:7d:13:
         50:f8:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----