Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
File:                     ULhDqNkbFYJOYOLNaJpvRR4lal4.cer (raw, json)
Hash identifier:          AsdDJVMNaGMdV4u3NwG+EAVIDUOcOPCxJrYvODHfhUM=
Subject key identifier:   50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9EFEFE6752F0CF3A4BA6A8709EC3A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:50:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.251.72.0/22
                          IP: 2a0c:1840::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:ef:ef:e6:75:2f:0c:f3:a4:ba:6a:87:09:ec:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:50:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:9f:3d:1c:17:9a:78:79:39:0c:c5:56:07:
                    cf:29:91:4d:96:f9:ac:85:d9:b6:b1:b7:5d:bc:93:
                    2d:55:68:22:05:a6:e6:15:16:4d:56:69:b6:4a:f3:
                    cd:66:69:82:e5:d9:46:ff:ed:26:57:bc:72:12:41:
                    bd:a6:08:bf:cd:28:17:be:64:69:cb:9e:9d:f3:fb:
                    ae:ed:89:08:de:ab:6e:55:4d:b3:d6:95:b1:9d:a9:
                    3e:8a:44:e6:72:d8:b2:7a:49:39:fa:98:8e:20:7b:
                    e2:d7:2f:72:6e:c9:5d:b6:4b:8d:99:61:90:79:da:
                    b0:85:5a:a0:8b:b5:17:60:b3:fc:74:db:db:65:df:
                    af:37:11:55:e6:9a:b5:34:84:4c:b7:5d:d9:82:59:
                    42:5a:63:4b:cb:29:18:d6:c1:ee:44:2f:6b:9a:e0:
                    6b:78:06:2a:52:51:99:42:f3:e0:2f:31:5b:4c:c3:
                    74:6c:1f:2a:49:55:a3:1a:00:8f:e3:e5:0f:7e:b3:
                    63:78:0c:4f:0f:e5:58:e4:21:da:f5:5d:c0:43:3d:
                    c8:bc:9a:01:59:10:94:3d:e9:b3:9b:46:cc:15:0c:
                    60:b8:0b:25:43:f9:dd:51:b4:85:44:4b:81:72:c6:
                    79:d8:f9:03:c6:60:0b:28:45:5a:0b:7d:9c:72:aa:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.72.0/22
                IPv6:
                  2a0c:1840::/29

    Signature Algorithm: sha256WithRSAEncryption
         47:3f:96:63:04:e6:bb:ac:24:1c:b5:40:1d:45:67:1b:7f:e1:
         97:a1:50:ce:1d:33:aa:50:76:12:39:cb:fe:1e:56:a3:04:f9:
         15:e0:46:82:f9:d5:2f:26:78:79:c9:87:e4:9b:07:ba:08:da:
         35:25:3d:3a:c1:80:1c:cc:7f:27:f7:8b:0b:3a:1f:79:05:06:
         c4:f0:3b:ae:23:82:60:c2:dc:2d:87:e9:de:87:27:88:5d:f0:
         1b:a0:34:3d:9a:4c:b1:8a:d6:31:85:c9:7c:9c:4b:1b:c3:1c:
         ec:36:a9:02:5e:be:52:78:eb:cf:64:05:de:00:c5:b8:9a:53:
         a8:26:88:7c:c5:af:ef:50:2c:71:39:63:3e:65:f8:bf:35:0f:
         50:7e:f4:de:40:7e:b3:2d:d8:3b:37:bc:8f:c7:92:3b:1d:ea:
         17:70:07:28:d8:3b:96:bc:bc:6f:1d:a6:ca:ca:3d:f1:64:05:
         b8:36:38:b7:7a:13:be:4a:f5:a6:c8:f0:32:01:19:65:cf:bb:
         a3:17:72:d7:d5:ff:b7:0e:62:76:4a:f3:b7:b3:ff:eb:a7:e8:
         98:db:f0:cd:d3:ac:e8:40:63:81:eb:19:eb:0d:4d:9a:9b:21:
         c9:b5:42:0a:77:99:3c:fc:37:b7:8f:98:24:16:19:72:15:c0:
         9c:f7:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----