Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
File:                     UdspKXLBDGn5fs0k8vtptPZ3beg.cer (raw, json)
Hash identifier:          rvK0W8AX8bl0xtMfFDUAKhtE2UzFiyMoPVbNqfR2L7w=
Subject key identifier:   51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BE4157F4B73C16EB4B9BC894E28BB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59864
                          IP: 193.203.6.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:e4:15:7f:4b:73:c1:6e:b4:b9:bc:89:4e:28:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:34:fb:c2:2f:d4:36:3b:6b:f3:bc:05:b1:f3:
                    ee:dc:ec:17:f5:5b:40:5f:3f:f5:ef:54:80:a1:cb:
                    e8:d9:56:78:f9:46:03:ba:8f:5a:a1:55:9d:c5:d6:
                    14:1f:d3:b3:29:17:4f:5e:5c:13:1f:3a:ed:94:77:
                    b8:03:ce:12:39:92:9e:a1:e9:d4:4e:04:5f:4b:c6:
                    fe:17:fe:c7:e6:db:9c:6e:90:ee:ad:d4:8d:04:82:
                    9b:51:55:cb:21:8a:50:33:71:8e:24:a5:53:b1:ed:
                    be:e6:c7:15:d7:fb:bd:e3:93:5b:9c:ff:56:88:82:
                    23:23:90:fe:c4:23:05:33:2d:9c:ab:03:67:80:b5:
                    08:f0:fe:8e:6c:d9:4a:69:95:4f:97:10:90:47:c0:
                    b5:8a:68:a9:0b:0d:b8:6c:18:09:e0:6a:0f:db:19:
                    42:c9:f8:82:3a:b1:a1:fa:17:28:34:a2:fe:2a:93:
                    25:66:61:b3:2a:7a:8c:9f:5d:7f:45:d1:66:08:9f:
                    77:25:9d:c2:e3:e6:46:ca:85:5c:92:cf:4c:a1:f4:
                    00:0b:13:72:3f:a1:f7:47:2a:3e:49:3a:c3:53:bc:
                    bd:85:00:46:f5:6f:65:bd:cb:fd:c3:d9:90:eb:80:
                    ed:61:dc:23:5d:57:cf:79:43:a0:29:0f:56:a6:4f:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.6.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59864

    Signature Algorithm: sha256WithRSAEncryption
         3c:3e:75:ff:5d:2c:f2:ae:97:28:fa:66:87:5a:88:d2:b5:bf:
         1d:89:ee:91:08:f8:13:30:4f:e7:6d:1d:55:4e:6d:e6:df:3d:
         dd:41:62:38:0a:2f:be:f1:73:f4:08:70:f3:b6:bf:70:81:fa:
         c8:ef:ab:30:bb:0e:90:04:6f:5b:25:09:ea:86:72:eb:2f:99:
         e5:58:a6:58:30:a5:66:87:6f:77:79:3a:89:25:03:fc:64:eb:
         fb:59:53:d5:15:f2:81:b3:2f:4f:1e:8e:a7:18:d8:bd:c7:3d:
         28:42:88:4c:3c:d1:06:7c:d4:1f:7d:15:0c:7d:66:78:ef:25:
         20:76:c2:62:aa:7f:62:4a:48:ef:56:ab:42:3c:09:e3:d5:f2:
         d3:02:2e:95:95:d2:35:64:07:ba:fa:b4:a8:e5:72:e5:48:9c:
         73:8d:25:d4:0b:fa:f0:2d:84:4b:41:63:46:f5:74:b6:45:51:
         b2:85:d3:dd:e7:70:68:40:8f:51:e7:98:5d:a3:7e:9b:9b:d9:
         8f:c6:c9:d5:79:fb:52:72:5c:f3:e5:24:91:5f:f7:b7:0b:94:
         68:cf:b9:35:1a:3b:09:c5:ad:94:3f:30:3c:26:64:3d:6b:74:
         92:62:06:8a:60:b8:8f:78:69:f1:da:10:6a:f5:4e:90:90:da:
         da:2d:29:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----