Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
File:                     W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer (raw, json)
Hash identifier:          Sza7jWMdl00nGu8vRv+5zeNkSxmteIJaLsbody5jdxY=
Subject key identifier:   5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDCDC022C6D75D9FC6E124A93B4096
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43926
                          IP: 46.253.40.0/21
                          IP: 185.182.152.0/22
                          IP: 2a0a:f180::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:cd:c0:22:c6:d7:5d:9f:c6:e1:24:a9:3b:40:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:b6:0c:75:75:e4:05:6d:6f:96:d3:0a:0c:
                    80:26:16:76:fa:52:d1:15:3a:b5:94:2c:8f:41:c5:
                    55:17:51:32:e2:25:5f:3b:32:9e:30:97:f0:9f:86:
                    b3:d9:31:a1:24:8a:6b:ee:44:f8:0e:ae:c4:16:42:
                    0c:28:d5:f8:ab:d8:e5:00:61:86:4d:29:9c:6b:b3:
                    d2:0e:3c:d3:d7:6b:01:95:2c:13:dd:db:37:bb:f4:
                    d7:b0:8d:23:b7:13:ca:09:ad:dd:af:32:35:7a:7a:
                    1b:86:8f:5b:52:72:b5:28:c4:6d:cc:f2:4f:8b:83:
                    d0:34:28:c2:25:07:a1:63:de:70:db:83:15:b2:8c:
                    82:91:51:8d:31:04:6c:fe:77:47:a9:08:8b:7a:90:
                    d9:87:a7:97:55:f6:84:c8:53:cd:de:1f:ac:60:0a:
                    54:01:8c:b9:44:bf:86:87:b7:dd:dc:da:15:05:bf:
                    59:22:f9:ec:64:5e:7c:b9:aa:67:a3:90:2d:24:29:
                    31:c1:e2:c0:aa:95:e9:7a:df:4c:e8:f7:cf:fa:7a:
                    93:1c:39:66:3a:cb:27:c7:af:f4:c8:31:db:74:26:
                    c1:e7:7b:5b:81:b3:d8:35:5b:ce:de:3b:08:45:ba:
                    15:72:c0:92:9c:61:7c:8b:f8:1c:86:58:10:54:16:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.40.0/21
                  185.182.152.0/22
                IPv6:
                  2a0a:f180::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43926

    Signature Algorithm: sha256WithRSAEncryption
         41:35:94:fa:49:d0:ed:65:f6:12:db:1c:ab:9a:ef:a6:b9:0c:
         45:73:38:9c:1b:b7:65:f0:15:4e:70:ef:8c:56:d1:65:ab:72:
         f2:a0:0a:92:e7:b5:7a:0d:c4:32:ca:96:38:0c:21:e2:75:ad:
         09:a0:45:6f:07:ef:3c:73:e5:ad:4f:72:c9:5a:b7:22:86:c9:
         a8:9c:03:e4:a4:78:44:f6:eb:9f:ba:43:d9:dd:75:c5:d1:a5:
         4e:38:59:65:b7:35:0e:b6:a6:c9:d5:ce:b6:49:fd:41:9f:a2:
         91:e7:03:63:81:6a:bb:d4:9d:8b:a4:1f:00:b1:13:e0:6a:cc:
         3e:5a:b5:9d:06:b0:3f:d3:a7:31:51:87:f9:c8:8d:10:0d:55:
         74:72:0d:34:a5:6f:57:f9:21:bf:e6:fb:d6:ee:7a:c9:17:8d:
         81:04:da:8b:2f:97:6f:bc:91:e0:43:b9:a6:81:3c:f1:b5:6c:
         8d:b0:5a:19:95:c6:0a:25:97:3e:73:11:93:87:fa:9c:5a:08:
         42:58:da:27:9e:b5:38:8f:30:6d:5b:ab:43:58:a1:5f:f7:ab:
         2a:43:20:36:d1:1e:2c:a1:d6:a7:c7:f9:4e:da:94:48:b2:84:
         b3:65:59:89:ec:c2:02:dc:95:fd:9c:d2:e4:5f:40:c1:98:f7:
         30:8d:9a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----