Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.cer (raw, json)
Hash identifier:          GYQyrbXPTzimz9+/TzzqA2L27rpW7S8cSKZmnvMqaYo=
Subject key identifier:   85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214434866922DAC37A4B6E3E9BB5AD54
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.102.131.0/24
                          IP: 2001:67c:53c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:34:86:69:22:da:c3:7a:4b:6e:3e:9b:b5:ad:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:e0:f4:e7:a1:ce:9d:c5:81:6d:10:80:99:
                    65:35:13:ae:2b:f4:8a:2a:1a:d3:1f:7c:54:1f:7b:
                    f0:12:ac:cc:65:08:a2:61:8c:9c:0d:58:2c:32:1a:
                    38:13:3b:93:b7:93:b6:54:ed:dd:d6:31:da:ad:53:
                    f6:de:c6:5b:d0:84:be:5e:93:70:64:b0:87:c5:eb:
                    7a:c2:b8:43:73:2e:7c:b0:7d:fd:3e:a4:d6:7a:47:
                    d0:08:c2:b9:fc:93:9b:d8:c0:ef:bb:fa:1f:5d:f1:
                    c8:56:e7:ad:9f:0b:07:6d:e2:bc:5c:4f:3c:b4:63:
                    09:bd:4b:82:49:eb:cb:77:18:9a:3b:41:97:e6:01:
                    1b:84:65:76:3e:1d:b6:a6:f9:53:de:4d:98:6c:36:
                    cb:0c:ef:0e:d1:c8:db:33:90:79:a2:a8:36:aa:1c:
                    4e:28:e4:a1:c8:3b:5f:82:c8:fb:73:ff:9f:aa:23:
                    df:c7:61:32:e8:fe:80:5d:c5:1d:5c:e8:c3:52:37:
                    56:02:65:31:cf:0b:cb:d0:f9:f8:14:25:62:47:92:
                    b2:a0:8e:4e:f4:eb:16:ad:46:5b:c0:74:5f:84:e2:
                    6e:0b:49:2a:6b:ee:e1:3f:67:b1:f4:b2:e2:73:c8:
                    0b:da:1b:24:4f:89:a2:23:b4:85:e9:fe:47:60:a7:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.102.131.0/24
                IPv6:
                  2001:67c:53c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:cb:cc:25:6f:4d:d5:4e:0f:c9:f5:ed:d9:36:f1:7f:d2:
         4a:c6:0c:f1:2d:fe:d8:46:c3:ab:8e:8f:41:09:b1:71:c7:4b:
         a6:3d:b5:d0:2a:7c:d7:80:2e:62:ae:ea:14:2e:9e:fb:b1:3a:
         92:db:a5:4d:9d:1c:4a:05:3e:fd:fd:39:e0:83:13:62:49:e8:
         b5:44:25:2a:e0:19:5e:1a:83:20:6e:46:41:5c:45:3f:b2:b9:
         87:e5:30:e6:0b:76:dc:e5:bd:32:21:f7:29:ed:26:f9:29:e6:
         74:8b:1d:06:2a:9a:be:8b:4b:95:cd:9b:45:da:d1:29:ea:e0:
         0c:d5:82:44:28:ed:ea:95:70:37:20:0c:a7:06:89:0f:a8:e1:
         c9:6b:dd:b4:86:4e:cd:08:5a:25:7f:4a:ad:df:c4:4f:26:bd:
         81:bd:ee:e6:f5:8e:3f:4f:15:a8:e2:52:c4:62:54:29:38:85:
         cf:53:86:46:b6:e9:50:1b:d3:0f:72:13:bc:6e:2a:61:90:68:
         89:58:f9:63:95:e2:b8:cc:73:a9:81:5c:31:c3:dd:ca:c4:78:
         81:9f:4f:f2:fb:be:98:29:15:59:54:3a:91:77:13:bc:74:0d:
         c0:4d:8f:c2:cd:9b:c7:6f:2d:86:54:9d:0b:e8:e6:17:a5:c5:
         ed:86:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----