Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
File:                     W8KZyUmzraue-TUmM_zsw7cr1Rg.cer (raw, json)
Hash identifier:          qjs3T7Yt1moobv2BWbYbwVhimGhl6605R9f4wQWMZLg=
Subject key identifier:   5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942823A9DF376F88FB36FE06E7D2C7CEFC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43241
                          IP: 2001:678:e50::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:a9:df:37:6f:88:fb:36:fe:06:e7:d2:c7:ce:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f5:e1:45:0f:66:01:2d:32:09:e6:67:57:78:
                    65:29:54:ce:97:de:dd:47:c9:e1:4d:a2:85:7a:9f:
                    fe:96:5d:b9:08:e2:c3:6f:f8:42:2f:8c:72:a8:a2:
                    d5:5d:58:38:0e:2c:49:a6:62:09:64:cd:43:58:80:
                    e1:fd:10:bb:f5:66:70:59:28:fd:b3:c7:d7:45:e0:
                    96:6a:e3:ba:53:a8:05:ab:0d:d4:42:f4:40:ad:27:
                    dc:24:89:ee:b4:80:de:f5:09:07:28:99:91:df:de:
                    50:5d:07:ae:a1:7d:40:8c:24:37:a8:3c:02:b0:8f:
                    d3:51:40:98:ff:de:5b:f7:c9:d0:a0:5f:e3:fc:1c:
                    87:10:6e:60:02:f9:fd:42:c6:09:cc:3e:a5:6d:36:
                    cb:4c:27:b8:4e:b8:26:df:bf:6e:7b:31:60:26:1b:
                    e2:6c:15:16:79:29:2a:ee:1d:ef:a6:66:09:36:30:
                    d4:28:25:53:fa:ac:ee:d5:76:a5:67:40:fc:33:6a:
                    c5:10:34:0e:a3:83:ae:7c:5f:37:71:77:84:84:44:
                    f3:f3:6d:83:d2:f8:de:88:7e:80:04:12:e0:a3:89:
                    ec:c0:7e:ad:7b:1b:cd:df:f6:01:17:81:f3:e2:06:
                    88:b7:43:23:1e:c2:1a:f3:87:27:74:38:9f:7c:7e:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:e50::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43241

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:b2:60:3f:b7:03:3d:12:77:c3:bd:af:a9:cb:3c:a3:f7:
         c4:96:04:07:39:c6:14:91:03:3c:9a:5b:61:b0:b6:bb:4f:77:
         d1:7d:f0:49:fb:3e:f1:9d:74:a2:c9:eb:c2:16:be:40:ef:8f:
         59:54:5c:c0:89:52:c0:1a:76:d9:75:69:dd:ad:34:de:39:ac:
         4e:c3:f8:21:0a:8a:bb:1f:54:6f:f2:d4:27:bc:e8:e6:15:28:
         ab:a1:ad:9f:60:ef:66:6f:c1:26:82:3c:94:a0:6d:95:06:1b:
         07:88:6c:0b:3c:92:bd:8e:06:95:7c:a5:27:65:7c:e3:3c:b9:
         ce:fd:58:30:c7:56:11:75:f0:00:97:be:4a:bb:14:bd:5a:e9:
         54:b4:61:83:ca:c0:ad:41:ce:a3:95:80:a3:56:98:66:ce:16:
         12:78:79:d8:ae:04:62:81:ab:ab:c8:78:8e:02:ad:91:30:31:
         9c:64:37:a3:1b:47:33:e4:64:cc:38:4b:27:02:1c:6e:4e:d7:
         19:b1:61:d2:82:2d:7e:41:82:ac:c3:f7:8f:62:e0:29:36:2e:
         c6:2d:a2:14:be:59:e3:74:fc:27:4c:89:99:29:c3:80:ae:07:
         05:af:20:c9:27:49:e2:b1:2a:17:b6:29:56:c2:10:4a:4f:f8:
         7c:d7:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----