Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
File:                     UztG46ndW36oqL_aL247rRVQkRM.cer (raw, json)
Hash identifier:          TgLfBAh4sET1FQh7EfogUFF1MzqpY149dOMeNm4EkxI=
Subject key identifier:   53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942068576E86F174AA91EA231E8ADA86DF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208658
                          IP: 2001:678:aac::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:57:6e:86:f1:74:aa:91:ea:23:1e:8a:da:86:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:74:8b:6d:e9:20:40:c2:e5:f8:a9:f9:57:
                    a7:28:27:df:65:24:22:c4:7f:d1:f9:62:f6:21:24:
                    d8:44:d5:16:4f:a3:91:48:17:eb:71:78:f9:76:9f:
                    81:61:be:c8:a1:fa:fd:dc:8e:b0:b4:b2:fb:b3:cf:
                    45:4f:cf:1c:e5:9d:33:fd:ca:1b:7e:cb:98:72:0e:
                    de:ef:46:1c:74:fc:08:90:5d:eb:ef:c8:35:9b:10:
                    ef:2c:95:98:82:c2:87:91:c9:10:95:cb:6e:07:68:
                    84:78:5d:5b:fe:17:6b:2f:4d:9f:26:cc:15:1d:49:
                    63:2d:3d:12:7b:1d:83:a8:59:a5:4d:73:05:77:e1:
                    f5:84:54:f4:58:d8:7c:23:86:98:4d:bb:dd:62:1a:
                    11:a7:75:82:ef:0f:6b:cf:e3:07:42:27:d0:a9:25:
                    1b:fb:d3:78:87:5d:b3:e5:97:b9:9b:24:cd:22:4f:
                    33:dd:39:a8:ed:d4:ec:aa:e5:f3:db:e2:07:f4:03:
                    97:e5:58:ba:34:ae:0e:34:db:4b:ee:40:b4:97:fb:
                    0c:92:97:76:9b:16:2b:83:5e:ed:3e:c8:f8:cc:0e:
                    c1:fc:5a:16:8a:27:20:7a:d0:39:66:5b:37:7a:b7:
                    dd:ef:07:f6:b0:7f:b7:0d:ac:e0:5b:55:d0:44:81:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:aac::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208658

    Signature Algorithm: sha256WithRSAEncryption
         5a:17:43:26:7a:b2:36:7f:2e:7d:16:d9:8c:6f:f7:79:84:ec:
         fd:17:f2:e3:36:1e:47:62:95:5e:f4:3c:d0:bc:5e:42:f4:17:
         28:55:4c:36:35:4b:36:dc:51:5f:c7:08:c7:9d:77:be:0a:6d:
         d0:e5:68:bc:92:ea:d9:60:2c:40:4e:c2:00:93:f7:16:2e:80:
         2e:ae:f4:97:69:e1:95:c9:c0:e6:d7:e2:eb:2a:43:a3:91:56:
         55:9d:26:9a:9d:e4:e5:63:19:49:38:a3:9b:e8:d1:03:27:0b:
         97:25:95:94:bb:32:c7:87:85:32:a9:a1:e6:59:14:40:a1:0a:
         26:db:b4:00:ce:f9:eb:d6:48:6c:d2:7a:40:80:0f:2b:c5:47:
         91:ef:39:18:94:40:38:e3:6e:e2:ba:7d:c2:a3:c4:76:d2:34:
         52:26:3c:e0:a3:28:cf:80:7b:14:24:55:ed:b6:96:04:8d:c6:
         05:c0:e7:6d:2f:72:46:14:79:53:1f:da:cf:17:34:f8:f9:fd:
         19:2f:cb:b4:c3:d0:99:5e:10:19:11:a7:fb:72:bc:a7:c2:aa:
         3b:55:1c:78:5f:86:5f:39:52:c1:f5:c3:d1:a9:dd:1c:51:fb:
         15:11:3a:2b:fe:2d:a8:15:0a:a5:3b:4b:a0:95:7e:7b:6e:f5:
         4e:c5:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----