Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.cer (raw, json)
Hash identifier:          HDO/9LtqnexGwfHQM0qs5J16yatYBSdMvUz/yeinfiU=
Subject key identifier:   5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA073AB7365AF63AA24AF7E49D5EA0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213366
                          IP: 2001:67c:a50::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:07:3a:b7:36:5a:f6:3a:a2:4a:f7:e4:9d:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:4d:d9:43:b7:6b:39:85:25:a6:d6:b7:65:
                    a2:ea:3b:34:fa:63:5d:fa:fa:ab:5b:f3:45:bc:ce:
                    c4:d7:97:9f:37:e1:3b:37:dc:9f:0b:e3:a4:cc:e3:
                    28:4e:8a:12:76:77:5f:5e:5a:45:25:48:63:9e:df:
                    31:8a:37:3d:9a:00:85:94:70:3d:77:93:69:06:e3:
                    e4:77:a0:38:45:cb:6d:f6:3b:9b:40:32:00:30:69:
                    77:e9:ba:94:5f:7c:e8:bb:a8:74:f2:53:c0:d2:55:
                    5a:20:55:ad:c0:c2:28:fa:8d:c7:4e:43:31:ae:51:
                    38:1c:e0:b8:ca:b5:5a:ad:3e:42:11:88:b4:d7:01:
                    50:33:07:95:f4:d2:dc:78:e3:14:2b:ae:5f:7b:63:
                    89:21:df:60:85:ac:83:06:29:1d:4d:d4:c6:dc:09:
                    e3:e5:5e:ce:70:4d:33:08:83:d4:b1:59:9b:7b:7b:
                    5c:f0:44:c7:aa:e0:8d:dd:d9:4b:46:21:f1:ec:6c:
                    bb:15:de:84:6b:28:e8:d9:33:41:94:cd:2a:a1:5f:
                    b6:62:6e:5b:1b:da:aa:3b:2c:68:88:f3:57:27:1a:
                    06:18:28:4c:57:a5:62:fe:5d:84:a8:a4:98:79:9d:
                    c3:ee:74:13:97:e9:10:ac:f6:89:02:71:dc:5b:f5:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a50::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213366

    Signature Algorithm: sha256WithRSAEncryption
         93:ce:f2:a0:8f:f5:20:60:af:27:6c:c8:6d:7c:47:b8:78:f4:
         9b:50:a5:26:a4:97:47:ea:7b:15:d5:87:7f:d1:a5:9c:0c:4e:
         1e:a4:ba:b0:83:cc:79:d4:a9:8d:c2:76:16:0e:42:a3:f0:a1:
         86:e9:26:f6:66:8f:02:e6:d4:05:68:0b:d2:b4:10:9a:39:5b:
         09:bc:2b:2b:f5:61:f0:aa:0e:23:69:29:d6:e9:9a:07:82:15:
         d2:97:34:bc:63:14:d9:91:76:47:e8:79:66:3f:be:21:22:09:
         b2:8c:7c:b3:d2:a8:f4:36:a9:85:5e:d0:26:6e:ce:46:62:ba:
         1e:7a:0b:da:c4:d7:13:34:54:1d:26:54:61:dc:03:fe:bd:2c:
         0e:e1:fe:bd:de:0b:95:2c:aa:64:02:43:26:09:d2:bf:0f:47:
         c2:37:47:fe:06:d6:4e:ca:58:0d:82:98:eb:25:69:e9:63:f5:
         ad:10:42:11:86:42:df:8a:f3:d6:a9:3f:3d:38:39:ba:cf:bd:
         82:a4:f9:6c:7c:77:b9:3e:88:35:1b:9e:ef:ff:30:09:3e:9d:
         53:08:95:c8:cc:34:a2:85:c9:7a:d6:e6:40:ab:88:50:2c:b5:
         3c:ce:e2:e2:76:e1:e7:e4:65:a4:74:59:db:95:07:0a:b9:91:
         79:58:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----