Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
File:                     CUSqrH8uuymBwkdj6z1gRe-9bwY.cer (raw, json)
Hash identifier:          qOaFNvkM19Vhn8R7jtsE5FUkcII//rP34eorJkp5oDo=
Subject key identifier:   09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3C0561A18EF808E1A7DF2E64F5D21
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.182.132.0/22
                          IP: 2a10:8280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c0:56:1a:18:ef:80:8e:1a:7d:f2:e6:4f:5d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:db:93:64:be:6d:a3:08:b3:57:d3:71:82:
                    76:91:62:54:bc:60:43:b4:56:34:bc:ac:b2:4e:23:
                    63:1a:c1:21:ba:8f:b7:ad:97:d5:95:0e:6f:52:df:
                    25:32:b5:45:8c:f2:7b:a5:93:cd:96:26:e8:76:ce:
                    2d:48:0b:fe:d4:94:18:04:f7:01:db:c8:02:f4:95:
                    6b:76:5c:a7:5f:3d:8e:2e:b3:d5:6c:d7:a4:a8:91:
                    80:18:8a:d9:8a:6a:52:37:e1:47:78:24:bb:6d:1d:
                    33:06:6e:94:ad:61:eb:a9:d2:fe:cb:66:c6:e1:76:
                    b7:ff:98:38:ab:bf:15:e5:f2:2b:fe:d5:75:51:ee:
                    62:20:ef:6c:db:a3:e0:5e:49:d8:0a:73:c0:32:5c:
                    36:4f:c6:85:de:a1:05:98:e7:cc:0a:ab:8b:81:84:
                    8b:52:d2:e8:3a:06:d1:60:88:38:9c:92:a1:3d:38:
                    8f:9f:e4:9a:89:86:37:14:45:f3:9e:a6:e1:d3:9b:
                    4c:09:13:b4:2d:e4:9f:1a:86:e6:1b:21:8c:6a:64:
                    bd:5b:d6:46:4e:ce:bc:05:cd:c1:ff:d6:91:d3:93:
                    37:5c:6d:32:ff:e7:b4:e9:c3:ed:33:11:e2:3a:49:
                    aa:bc:80:4a:bf:31:cd:a6:2f:8a:53:44:2e:3f:3a:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.132.0/22
                IPv6:
                  2a10:8280::/29

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:22:e2:58:02:56:b1:99:ae:09:80:8e:a7:69:a9:7e:aa:
         0e:ff:e0:38:b6:aa:f0:f8:e8:90:de:ef:06:80:bd:0f:0f:50:
         af:7f:cb:27:3c:0b:0e:ef:43:a0:6f:2d:d9:fe:41:32:2d:d6:
         10:b5:87:ed:8d:9b:84:6e:52:37:3c:55:eb:a1:b1:cc:19:3e:
         e0:20:8f:44:ff:0e:52:b3:8b:b2:0c:81:1e:80:f4:b9:9f:08:
         46:fc:df:2f:e8:52:bb:e6:b3:6d:fd:00:e9:98:be:54:5d:f8:
         b5:44:11:f0:97:35:62:6a:80:41:60:7a:93:8d:75:8e:03:13:
         9e:e2:09:98:8f:dc:bb:64:2e:ec:95:5c:67:ba:f9:87:df:69:
         88:7f:e2:e9:61:a9:d5:89:7d:14:76:1a:db:1a:51:9d:0a:d4:
         6b:b2:cc:ad:d7:63:0e:22:2c:e5:07:54:b4:90:aa:ba:89:d3:
         95:3d:58:bf:40:cd:76:12:55:7d:57:af:0b:38:af:9c:a5:f7:
         d3:1a:cc:27:cd:95:48:7a:44:7d:6b:a1:e3:2d:01:9d:b6:0d:
         4b:e2:d4:e1:06:6b:d7:d8:4d:1b:3e:c4:7d:32:e8:2f:16:cb:
         b7:79:76:0c:f8:fd:ad:22:20:f2:d7:31:8a:1b:c8:73:78:77:
         d1:bb:2c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----