Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
File:                     F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer (raw, json)
Hash identifier:          DCWAcuOeXa2thKgLtRKTi0Bjs2ilXxxD01cPwwRub7k=
Subject key identifier:   17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BBBD9EAFB6BCDBC6D4B30607772D8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 166.49.128.0/17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:bb:d9:ea:fb:6b:cd:bc:6d:4b:30:60:77:72:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:24:ef:a5:16:62:1d:c9:ac:e8:c7:6f:92:
                    8b:ca:5d:42:76:82:4f:2b:3d:cb:df:28:01:d0:0d:
                    62:aa:82:26:e8:cd:6e:c3:ea:21:0d:8e:f5:39:45:
                    6a:f9:3d:80:1a:b5:93:f3:47:68:83:db:3b:1f:ef:
                    c4:bf:8c:f8:b8:68:4f:f3:f8:fb:90:2c:ef:5c:7a:
                    48:5f:8d:fe:6b:88:c3:a7:ee:64:55:fe:15:6f:41:
                    4b:eb:44:d5:62:03:f5:c8:e3:d7:5b:88:ef:15:06:
                    bf:b2:cb:98:9a:e9:e2:3d:a8:9d:03:90:cd:fc:c4:
                    1b:4d:f7:78:b4:a7:f1:09:c7:a9:70:c2:8c:0d:ce:
                    4f:b2:d9:9e:7c:78:c5:39:c5:cd:f5:15:4b:48:a7:
                    f7:6c:35:27:7a:be:6c:c2:15:56:9c:5d:ea:84:89:
                    d6:64:1e:ea:bd:b7:da:77:d2:9f:08:c1:15:43:4c:
                    23:49:09:02:4f:81:cd:29:db:83:e1:5d:75:36:be:
                    63:8f:9e:76:0b:d6:fb:ad:2e:01:10:4d:cb:6b:45:
                    6b:28:ac:05:8e:9a:71:92:aa:92:f8:f9:bc:0b:ae:
                    be:c9:32:27:50:aa:6a:24:90:e7:a9:28:fc:e5:8c:
                    4b:09:e7:ea:91:88:63:f7:91:a9:d3:6e:19:0f:62:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.49.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:ed:13:e9:18:7b:2e:83:37:32:7d:2d:99:9b:a9:0d:67:
         a3:e4:59:a8:39:ae:8f:5d:df:d7:ec:b1:9c:cf:a3:60:25:9b:
         b7:58:d0:a9:c4:b9:f9:b1:ef:62:3c:69:bf:39:a5:b6:19:1d:
         bb:db:ad:58:6f:2f:d1:b3:c6:b3:84:27:01:4e:9c:d9:0b:01:
         69:61:7d:f7:50:a0:68:7e:8b:e6:80:6a:6d:7d:5f:fb:49:7b:
         b3:b2:8a:d5:f2:fc:f9:44:7c:84:4a:66:6e:f8:d0:34:b6:82:
         b6:f6:47:01:31:c6:5e:e5:a5:cb:09:0a:0d:6b:df:6f:fc:fb:
         7f:dc:24:d4:1e:33:c6:83:21:b8:fd:e2:01:f6:58:76:e0:f0:
         7b:0a:8c:dc:c6:86:75:97:ab:6f:b2:65:d6:5a:22:64:85:34:
         d4:ab:13:4f:2e:3d:ea:79:89:81:87:ad:29:ca:c5:c5:4a:5f:
         fa:42:0d:7a:2a:8e:01:f8:67:a5:3a:c3:64:19:6f:5f:6d:09:
         e5:00:77:c4:0e:54:9d:3c:1b:1b:d7:18:35:d3:0b:c7:7d:62:
         01:6d:12:3e:e1:0a:1e:07:90:c6:82:de:16:fe:c9:1a:be:bf:
         15:94:bb:3e:0a:b4:d9:99:85:a0:56:3f:c0:b8:6e:a6:81:8d:
         56:0c:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----