Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
File:                     V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer (raw, json)
Hash identifier:          f+R+RfuZup/db+nMLDnvOv2nhJLKor9FZ+cQX2zoj3g=
Subject key identifier:   57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D625E569A2AC36B08D194287441BFD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214650
                          IP: 195.225.80.0/24
                          IP: 2a11:e600::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:25:e5:69:a2:ac:36:b0:8d:19:42:87:44:1b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:0f:ef:24:20:88:02:ab:ae:cd:dc:19:9f:
                    ff:f6:41:57:5c:f6:d6:96:ef:3b:a1:e3:b3:e9:29:
                    67:b4:4d:44:af:47:e3:4c:b9:81:cc:85:ed:98:22:
                    e7:41:9a:95:bf:7d:dc:7a:17:c0:8b:db:a2:c4:59:
                    b7:24:2f:17:4d:9e:49:6b:b7:c9:1f:f1:60:d7:41:
                    ea:39:e7:8c:24:64:7a:98:b6:b8:0b:0c:33:f9:3d:
                    ec:7f:7f:b8:ad:97:78:ba:ab:d2:df:d7:f1:e0:f4:
                    86:41:41:44:9d:c1:c9:9f:1d:d7:d3:78:26:9b:18:
                    b7:db:ff:d9:35:48:0a:31:38:01:e8:9e:4b:30:1e:
                    45:4e:9c:c3:d0:42:30:7d:ab:1a:2e:57:cd:a8:89:
                    b7:ea:d2:10:ff:2a:77:9c:03:be:7d:9a:dd:66:d7:
                    9a:23:ce:1b:9d:fd:a1:7a:c5:f8:db:69:e4:a0:49:
                    e9:bb:2f:49:56:a9:fc:94:0e:3d:f9:50:8e:e0:5d:
                    3a:6e:39:87:ff:e6:16:d9:34:18:7c:9e:75:a2:4a:
                    e4:65:31:e9:2e:75:d6:b7:cf:7d:cf:7c:a8:2e:32:
                    94:3f:0e:55:68:fd:ce:90:f4:45:97:d1:94:9e:04:
                    42:b8:28:cb:6e:00:e5:df:29:59:54:f3:87:c7:31:
                    46:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.225.80.0/24
                IPv6:
                  2a11:e600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214650

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:76:aa:cf:53:83:86:f3:b3:aa:8d:cf:28:78:d9:ea:33:
         7c:c9:7c:f0:cf:e9:6d:96:13:cf:5b:17:12:5c:4d:90:d3:b3:
         68:b3:e2:65:cd:4f:6a:b6:59:d6:46:2b:b0:5d:2f:66:68:c6:
         6b:9f:22:12:bc:d5:af:c8:20:11:7c:4e:12:7a:f2:7e:26:a3:
         5c:dd:94:7e:87:95:d3:c3:97:57:9b:e3:bd:8e:26:17:64:c6:
         3f:99:35:df:16:10:9f:ac:5a:73:f0:88:54:26:fc:7b:52:eb:
         e1:68:b2:54:fe:0d:97:71:7f:d1:56:84:ca:18:7e:b7:46:da:
         6b:57:b4:99:09:63:21:b3:43:b8:82:a8:56:ee:bb:e1:46:ae:
         99:47:08:87:e7:19:f8:3e:35:bc:58:36:8a:f5:fa:61:fc:8b:
         74:bd:d4:5b:27:58:5d:37:73:35:a8:ce:99:90:e6:fd:5b:f6:
         a4:de:89:36:d9:df:6a:ae:76:ff:12:f6:64:d0:fa:fc:d2:a6:
         93:30:dc:8f:0a:03:82:76:93:bc:6f:d5:da:87:47:c8:eb:24:
         ee:1f:79:10:2d:42:c7:34:a5:97:63:9a:6b:86:a1:66:77:a4:
         31:41:1e:2a:78:3e:89:20:ea:f7:7d:4f:81:c7:81:17:a7:ed:
         a7:29:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----