Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
File:                     UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer (raw, json)
Hash identifier:          NcDtmDFCkUdB7h1z9XCz7S2V+cSug1aKRvE7rFUxJgU=
Subject key identifier:   52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D99FE1AA8ABBA64402141B500BB50
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.201.16.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:99:fe:1a:a8:ab:ba:64:40:21:41:b5:00:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:44:25:cf:61:c9:46:4b:aa:cd:c1:24:f0:
                    c7:2c:73:71:be:5a:36:1c:f8:89:4b:72:03:1c:b4:
                    e7:48:0a:ea:a4:a5:80:f2:82:90:a4:88:87:98:c9:
                    0c:c2:32:75:d2:7c:38:3e:a8:78:c0:3d:91:ec:37:
                    7f:55:f8:b9:eb:ee:0c:6e:ce:34:af:f8:64:22:86:
                    ee:c2:7e:f6:21:a9:23:7a:a1:b2:4f:4a:06:c5:cc:
                    d7:1b:0f:e5:e8:e8:eb:80:35:b6:21:74:55:84:15:
                    a8:aa:c0:65:21:e9:af:20:bc:f4:23:3e:db:fb:af:
                    7d:50:63:09:c4:94:98:f1:61:6e:c9:fb:fd:32:38:
                    6b:5c:8e:74:9c:aa:a5:03:b6:5c:6b:61:61:91:fa:
                    e2:79:f8:f4:be:79:2c:22:5d:b9:21:4e:c6:12:f1:
                    07:72:9b:1d:a9:23:e0:58:59:67:7c:7c:69:e2:61:
                    02:83:c1:10:bc:7e:bc:1b:a3:7e:42:c4:66:62:ac:
                    85:91:df:10:b1:4d:c7:17:79:a1:00:5b:d8:1e:f9:
                    65:fe:a2:0b:9a:93:0f:da:30:75:18:a2:a4:62:2a:
                    4e:98:7c:a0:3c:b9:5a:aa:29:56:b2:cd:dc:45:26:
                    e7:7e:81:ee:47:d1:ac:2b:b2:0b:e0:5d:fc:33:fb:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:6d:84:76:f0:39:08:0a:59:de:ad:61:54:4f:2c:0f:8d:02:
         76:13:97:c0:95:dc:82:48:70:04:e7:19:ee:1c:d9:31:a9:37:
         ec:99:68:37:6f:06:d9:f4:be:71:cc:a8:29:e1:9e:0a:b1:1b:
         f3:cf:4c:b9:87:a3:41:47:eb:f1:58:5a:ee:08:b6:06:c5:b5:
         d4:b7:a3:0a:dd:4a:4d:24:64:4f:ce:d8:15:f5:2a:70:98:e1:
         5e:e4:d7:b3:86:9d:ce:4c:1d:c7:67:bb:a7:d4:71:33:89:4e:
         3b:59:5b:b1:ed:2b:ee:54:69:7c:85:a9:0a:1b:66:1f:6f:f3:
         0d:40:a0:36:51:8a:9a:f3:ce:a9:97:50:8a:a8:55:e8:42:f0:
         e0:d1:51:70:a8:9f:14:ad:1a:48:92:62:f4:5d:b1:57:4b:35:
         b1:fc:8c:d9:ca:d6:69:7e:78:94:7a:ef:18:a2:04:7a:77:0e:
         7d:91:29:8f:8b:95:7c:12:b7:29:e3:84:72:57:b1:95:0b:29:
         5c:87:db:0f:d2:67:1e:bb:b9:83:55:3e:68:e1:33:65:38:85:
         d9:23:7e:23:a0:a6:55:66:c8:0b:fa:57:73:e4:4a:6c:97:6a:
         2b:24:7a:83:f2:72:78:b9:9e:09:27:57:4a:46:7e:e8:ce:e3:
         ab:fa:51:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----