Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
File:                     UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer (raw, json)
Hash identifier:          cuxc346/xTb//D2lEdEXlDvjcj7N3KXckBJnIz3INbo=
Subject key identifier:   52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942823A4DA652CC9E0E024A0E1344844F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 2121
                          IP: 193.0.24.0/21
                          IP: 2001:67c:64::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:a4:da:65:2c:c9:e0:e0:24:a0:e1:34:48:44:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:bf:a2:2d:a5:be:8d:ae:60:8b:53:41:a8:
                    79:44:3d:13:e9:83:50:27:f1:07:fb:d5:88:a0:ed:
                    f4:13:12:97:2b:25:53:ce:e9:e1:a0:d7:d3:5e:9b:
                    05:a1:a9:75:97:63:df:03:b6:a8:58:28:2b:67:a6:
                    5c:f2:ab:d6:ac:b7:5c:e1:15:77:44:66:42:30:78:
                    77:d6:06:4f:30:61:77:1b:c5:ff:e7:cc:9f:40:87:
                    71:26:23:b7:62:11:34:19:00:d2:a2:4e:9a:ba:3d:
                    d9:af:10:47:c3:a3:48:ac:7b:dd:0e:0f:8f:16:c2:
                    e4:14:15:b1:96:dc:0c:8f:1b:c9:ac:1a:59:5e:3a:
                    a3:ad:6c:a0:38:85:fb:2f:26:0d:9f:28:c6:1e:10:
                    61:dc:ed:8c:ab:57:05:13:60:09:22:87:44:6b:a6:
                    0f:50:e3:4b:90:3e:a9:75:42:73:e3:03:39:cc:5b:
                    2b:0a:e5:94:4d:26:db:c8:66:e7:ea:00:9f:86:05:
                    c2:89:4d:6b:f8:9b:7c:21:cd:75:07:c6:0a:54:3e:
                    23:81:e1:c6:e3:0b:0c:b0:66:76:84:99:e2:a2:46:
                    1a:6c:5f:db:30:fc:09:71:12:c6:c0:70:64:aa:41:
                    91:fb:c8:7d:22:a1:9d:d1:c5:47:55:35:ee:f2:cb:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2121

    Signature Algorithm: sha256WithRSAEncryption
         63:57:84:32:be:13:5b:0e:f3:f0:17:18:fe:33:ca:03:1c:fd:
         9f:1d:fe:d1:d9:32:5d:cd:0d:13:52:1e:80:28:fe:6f:0b:3d:
         e1:e5:ed:0e:3d:29:83:9c:22:af:7a:bc:3d:40:78:bd:b1:df:
         27:0d:11:e9:ff:32:6c:6f:01:0e:39:65:ce:cc:cb:55:e1:c9:
         a3:61:f7:58:ac:52:42:8e:5e:1a:73:9d:f9:82:ba:41:71:6f:
         16:b9:f6:52:06:01:6b:d7:d4:a3:75:8b:24:77:2f:4f:b8:01:
         1d:e7:98:85:1a:bf:3b:c7:55:93:c0:88:fe:e7:5b:d8:32:98:
         c3:64:e0:22:09:c0:29:a4:4a:7e:77:da:ba:3d:5c:92:cd:c2:
         26:6e:2f:cf:4a:f3:77:38:fc:59:b7:4f:22:42:a7:bb:c1:fd:
         dd:64:4e:02:8e:76:6d:2a:78:88:dc:a5:b0:bb:06:ba:63:a8:
         6c:9a:01:13:71:eb:98:1e:3d:d7:f3:6e:8c:87:7b:45:f8:02:
         55:21:da:33:d9:6a:aa:94:d4:6f:ba:00:df:d7:c2:75:c2:f3:
         b5:e4:f2:04:a7:6c:3b:3e:00:90:81:2c:24:d3:14:68:c2:e3:
         6e:f4:ae:fb:51:f2:a8:71:cc:2b:c5:9a:af:09:a5:f9:8a:29:
         cc:3b:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----