Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
File:                     UOaW5uJbSSu34HyzKbtDVLERpoE.cer (raw, json)
Hash identifier:          60L/xr8rU+GtI4Kh/MX6qzWR4UQCVgKv9mwjF4kEQCo=
Subject key identifier:   50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DDD00DA39E901668FA841D20FB240
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213250
                          IP: 45.155.172.0/22
                          IP: 2a0f:580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:dd:00:da:39:e9:01:66:8f:a8:41:d2:0f:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:bc:b3:5e:9a:ae:39:e9:a3:a0:7f:22:c9:
                    e8:c2:cd:c5:01:65:78:36:02:fb:fc:39:c8:71:2c:
                    2a:d3:26:e1:dc:63:b2:bb:05:d5:8b:b2:f1:70:2b:
                    80:4a:cd:95:c1:8f:03:77:b9:8e:18:c2:30:fd:75:
                    06:25:b9:16:79:87:d2:7c:ab:34:4d:a8:a3:b4:6c:
                    a7:f3:d1:67:fe:7b:ac:88:b0:d1:48:d5:43:8d:ab:
                    40:f0:ef:09:0d:31:4d:b6:80:7f:51:37:71:51:3d:
                    1b:50:17:cc:14:f4:a5:64:6a:a1:70:d9:80:de:46:
                    ef:f3:49:5b:e8:d3:c0:2a:11:f7:0e:8e:c4:38:fd:
                    68:c3:53:a2:77:40:b8:dc:93:33:1f:28:a1:1a:ea:
                    99:00:73:9b:f0:4a:cd:3f:40:69:a8:0c:09:92:d3:
                    91:ca:66:1a:a4:46:93:ef:23:67:29:2e:1e:b6:98:
                    b1:9f:49:09:7f:81:98:07:39:84:06:bb:5f:24:ad:
                    be:40:b4:29:17:4a:9c:f5:c5:dc:51:ce:e0:85:60:
                    5b:ed:47:f9:cd:fb:47:05:48:54:72:c9:33:b7:5e:
                    80:d8:2c:7e:fe:77:ce:01:96:22:a1:c5:53:fb:45:
                    a7:03:39:87:6d:4c:6d:5e:3e:16:49:1b:06:83:1b:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.172.0/22
                IPv6:
                  2a0f:580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213250

    Signature Algorithm: sha256WithRSAEncryption
         43:42:d7:7f:61:b6:49:a4:ca:15:94:17:6d:d2:cf:e1:2f:ed:
         1f:10:6e:81:f1:99:26:4c:5e:84:ed:27:ba:be:9b:f2:06:b8:
         78:6d:6b:eb:e9:a4:0f:be:0f:72:ca:6e:93:b8:ca:fb:42:12:
         f4:8c:8e:ae:a2:f8:8a:51:92:e4:c6:21:b5:96:3a:b6:50:b8:
         de:e3:d3:ad:3b:72:3a:54:18:1e:80:1a:ba:36:8b:d3:e1:ac:
         b1:55:24:df:54:a9:ea:bf:4b:3d:9a:c8:2a:59:c7:e6:e1:d9:
         1f:9c:ee:c3:26:d3:73:a3:38:fd:49:9c:d1:7b:fc:18:56:4f:
         5d:ca:93:c1:f4:ea:8c:90:7e:2a:08:4c:b8:af:34:c6:93:39:
         1e:be:76:14:90:53:5f:74:42:a6:98:32:52:02:10:65:af:de:
         08:74:91:85:54:35:ad:3f:72:e4:3f:2e:dd:19:e5:00:e6:d1:
         38:a8:7b:c2:cc:78:48:bc:fb:fd:50:e2:82:4c:c3:f0:54:95:
         e4:48:bc:a4:80:60:81:24:da:be:92:81:a7:17:a1:04:7e:b0:
         30:d8:1b:d2:e0:d1:7d:e0:61:6c:ca:f4:a6:4d:59:2b:9c:00:
         2e:c9:9e:b3:b8:4b:37:97:44:b7:c7:54:b3:ea:a9:67:c3:c3:
         6b:56:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----