Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
File:                     LuKffz-qSKlAq42iErSxEWiD8nM.cer (raw, json)
Hash identifier:          AfRpgIYU2zL1YSuCGZQpkSfSGcKPROuw5AZH8X6UKC0=
Subject key identifier:   2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942445714DCAB39A9104CA4F272CEAD8B8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41038
                          IP: 91.233.22.0/23
                          IP: 195.95.175.0/24
                          IP: 2001:678:250::/48
                          IP: 2001:67c:25b8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:71:4d:ca:b3:9a:91:04:ca:4f:27:2c:ea:d8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:2a:48:fb:55:73:5a:52:6f:99:7a:13:2d:
                    eb:73:b7:4a:7e:af:06:09:32:88:2e:54:40:2c:a0:
                    98:b0:49:01:e0:7b:b2:5a:cb:35:b1:ea:72:4a:49:
                    77:27:42:b3:63:f6:16:b4:06:78:0b:2f:d8:75:f3:
                    c4:e2:ab:f5:ef:58:36:a3:18:a4:75:0a:38:65:55:
                    f2:58:90:81:c2:97:e4:e4:aa:09:6b:cc:e2:f7:4e:
                    4c:75:35:92:ca:b2:b9:a2:2b:59:3b:11:24:ce:6e:
                    c4:d9:03:bf:c7:15:b3:3b:76:c7:01:79:b9:ca:c2:
                    9a:c5:17:69:2b:39:84:31:61:1b:47:82:bb:af:76:
                    02:6d:a9:f0:5e:d3:c3:0a:7c:06:5c:48:1d:92:77:
                    08:91:b4:c0:ac:5d:94:dd:85:a9:c3:93:aa:08:7c:
                    31:0f:a3:89:a3:d7:33:a5:37:74:a9:58:2e:8f:46:
                    de:c3:6a:4b:78:1a:bf:00:3b:9a:9c:6f:58:12:64:
                    7c:b3:a4:f8:9b:17:f3:df:bd:2e:00:ca:b1:e8:1a:
                    63:9d:b4:c8:af:1c:7b:57:14:53:a0:cd:24:9b:9b:
                    7e:94:38:28:d7:0e:54:de:9a:3f:d9:13:53:37:f2:
                    af:2a:02:c1:10:d9:95:9d:80:eb:96:69:23:d1:f2:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.22.0/23
                  195.95.175.0/24
                IPv6:
                  2001:678:250::/48
                  2001:67c:25b8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41038

    Signature Algorithm: sha256WithRSAEncryption
         a1:b0:35:44:c3:c5:64:ce:63:45:a9:0b:44:87:75:b9:c7:6f:
         2d:d9:a3:5c:1a:4a:50:e8:3d:d7:15:d6:de:5a:6f:bc:c8:91:
         70:be:d8:9b:8c:7a:e1:b9:c4:bc:99:a3:ad:86:ed:08:04:95:
         c6:0c:06:ad:a4:71:cc:de:ee:da:be:0f:16:09:8f:92:ca:9a:
         ba:ee:96:8b:f4:af:7c:f8:cd:a8:4d:bf:d6:cd:2a:05:97:27:
         1d:7c:fa:22:b9:f9:71:44:41:ed:d9:ab:8f:df:3b:24:da:d2:
         14:9a:94:e6:c7:60:34:e1:23:7e:f9:a1:3c:b3:11:a5:5d:e6:
         12:aa:9e:6c:2d:8c:f3:6a:23:e1:5f:3f:31:05:ab:b3:dd:b9:
         e5:be:72:3f:08:92:b0:8c:2b:50:a3:10:a6:b3:1d:2e:19:6e:
         b7:e3:a3:4d:b1:49:c1:0d:f7:2d:ca:51:16:af:96:c6:e7:71:
         bd:35:ad:44:72:68:3e:03:b3:6b:3c:dc:03:47:6b:ec:e0:b9:
         e0:5a:b9:fd:3d:fb:17:6d:c2:0e:f2:fb:df:07:34:13:90:f3:
         88:e6:b1:de:30:ea:8d:84:85:24:a6:71:3a:1a:b1:e8:4e:28:
         18:2d:48:29:8e:40:1d:84:78:24:8b:f2:13:52:f3:b4:96:d8:
         bf:66:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----