Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
File:                     cFUm-asN0naCP8Hw66od5jt9ZWw.cer (raw, json)
Hash identifier:          YCtmen6RLOcOG2QTp0NDLW/91et/IlRmdbUaX4d6yK4=
Subject key identifier:   70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444E4C6EFDB12973CBA8DCEBB96DDDB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210129
                          IP: 185.94.132.0/22
                          IP: 185.227.120.0/22
                          IP: 2a0d:52c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:e4:c6:ef:db:12:97:3c:ba:8d:ce:bb:96:dd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d7:93:f5:5a:21:76:9d:f0:bf:7d:d4:b8:86:
                    f3:9f:6f:8d:09:94:a0:8e:8b:61:60:b2:52:00:ec:
                    12:ae:e6:6f:2a:3a:88:61:cd:42:65:f3:f0:4c:fd:
                    35:c5:91:68:f4:57:1e:34:77:a1:7f:6d:7b:53:3d:
                    97:9b:c4:16:5a:c9:40:d3:cb:ca:a8:56:ae:02:11:
                    73:40:11:2e:2f:fb:0f:3b:03:16:06:e3:77:4b:dc:
                    a4:49:82:11:bc:95:b9:3a:74:f4:e6:01:b1:4d:09:
                    2b:c1:31:8e:06:a7:cd:62:78:7f:97:a0:c4:40:bc:
                    1a:65:2e:f1:37:84:9f:bf:d6:24:b6:83:af:6d:03:
                    4d:54:86:99:a9:38:e7:ab:63:ae:2a:40:35:5c:5a:
                    47:75:15:dd:0d:1a:c9:94:f7:09:e3:be:38:a1:e3:
                    cb:0d:fc:12:f7:92:2e:ab:12:74:93:25:2d:95:18:
                    55:51:34:57:77:4d:35:05:03:c6:0b:36:59:35:50:
                    fc:9d:57:ae:0e:d4:1b:39:ed:96:9e:6a:f8:e8:54:
                    18:06:9e:84:30:fc:c2:17:44:60:f2:22:46:dc:03:
                    99:b7:31:66:fc:a4:3e:f3:4b:a6:d7:05:0e:a3:89:
                    19:ac:1d:08:7c:22:0b:45:7e:5c:a7:bc:f3:ec:66:
                    44:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.132.0/22
                  185.227.120.0/22
                IPv6:
                  2a0d:52c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210129

    Signature Algorithm: sha256WithRSAEncryption
         8e:f9:28:7e:76:39:92:8f:96:bd:06:ff:cd:58:e4:7f:4f:66:
         37:ae:4a:22:0c:90:21:6a:cd:8e:96:35:fa:96:3e:a1:78:5e:
         2f:d1:98:84:dc:5a:26:e4:41:06:66:a0:bf:ef:83:be:94:d3:
         10:75:2d:cb:44:94:c7:6b:df:33:d0:e2:c2:8a:52:bb:18:5e:
         78:35:ec:97:d0:cd:e8:c6:7b:a8:7c:93:bf:bf:e7:90:cc:d1:
         fc:68:02:4e:54:87:a6:d2:11:fd:4c:f1:89:4e:ae:59:b1:06:
         57:0c:01:b5:02:b2:25:4f:71:2f:07:6c:32:29:53:55:f6:05:
         19:8a:ea:57:4d:ab:5a:09:7e:28:e2:90:d7:ad:0d:f6:35:e7:
         6d:42:8a:3e:f7:c9:52:6c:5e:77:1b:aa:ab:88:d8:7c:33:d9:
         26:cb:44:dc:e6:7e:cc:ee:64:52:05:22:ea:cb:b9:72:ed:bb:
         ed:04:b4:da:0a:52:ed:e2:ae:de:91:08:df:a2:4e:5d:93:09:
         e8:2b:b3:7b:2c:c1:42:ca:92:88:22:2a:3c:c6:ef:04:57:16:
         86:04:87:d4:51:7b:bb:fb:be:48:22:b7:0f:4e:68:f0:64:a4:
         3e:77:87:c8:33:78:32:94:b6:83:82:f6:42:86:bd:5a:8a:ab:
         64:3e:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----