Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
File:                     rujl3-xoOuXxoOvg-5b6JWswR2I.cer (raw, json)
Hash identifier:          tT/HcdfVJztt9Kf3vpMvCRN99602thTvWVPr/1Xqp1I=
Subject key identifier:   AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7E7C3F16998702B0698FCCA357814
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210458
                          IP: 146.19.141.0/24
                          IP: 2a12:c500::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:e7:c3:f1:69:98:70:2b:06:98:fc:ca:35:78:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:75:82:ac:eb:ac:ce:a5:66:08:4c:e4:34:f8:
                    c4:21:c9:5f:e3:ab:28:f0:40:29:05:e5:b6:f6:80:
                    c6:e7:27:af:c9:09:14:57:53:b5:51:60:9e:23:25:
                    39:60:48:1b:2e:8c:91:70:36:60:a4:21:bc:d1:f3:
                    0c:40:30:67:89:93:99:7f:20:bd:08:88:5b:83:3c:
                    18:1e:06:45:b9:07:98:f1:1d:69:92:c4:d9:2b:0e:
                    b3:c1:cf:1b:84:9e:fa:07:74:50:d0:df:20:08:30:
                    f7:b0:00:f7:8c:fb:f2:54:3b:37:ee:64:96:de:ea:
                    7c:d9:ca:bb:b8:e1:23:35:4e:dc:a7:1c:78:32:31:
                    31:52:bd:46:7e:89:fc:20:e2:5b:7c:af:fe:4f:18:
                    b5:62:22:d5:01:2f:1e:0c:1f:42:5c:5a:64:c9:b7:
                    55:e3:9f:bb:10:7e:b8:80:b4:11:f9:7b:f5:05:86:
                    39:00:70:d2:db:18:b7:8f:d2:ed:67:03:ce:89:f2:
                    ad:e4:2c:5b:6a:38:ba:2b:aa:11:68:5b:ad:17:e6:
                    a4:71:b6:52:a8:90:85:0f:46:ac:5f:6d:e6:2d:86:
                    63:14:3c:f0:08:ef:86:10:83:99:81:d7:13:d8:d4:
                    c3:8a:fb:08:98:98:c2:25:73:d6:fd:a7:91:2c:e7:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.141.0/24
                IPv6:
                  2a12:c500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210458

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:58:92:12:25:01:93:ac:f3:51:19:cf:e3:fe:d9:97:da:
         1a:8e:36:a0:a5:e0:1a:69:7f:f9:e2:1e:9f:bf:57:a7:be:7d:
         17:b9:e7:80:be:b9:b3:25:1d:f3:d0:17:8d:5e:e7:b8:ec:66:
         09:52:8f:f6:3b:26:55:64:62:8c:7f:21:89:d8:94:07:ae:02:
         25:a3:a2:67:f0:7d:17:17:7a:74:c6:3a:be:82:53:14:b6:b4:
         4e:ab:33:c5:2a:b1:ec:7a:5f:7d:ff:e4:a6:af:ec:f5:1c:ed:
         80:b0:92:8b:57:d6:3e:cc:3e:df:72:ab:02:87:2d:27:4e:80:
         4e:df:6a:1b:19:12:bc:84:14:f0:71:46:82:57:13:b7:9e:e2:
         52:5b:c6:b8:73:9e:c1:0f:68:5c:76:3d:80:1c:75:56:f5:c6:
         4c:6f:42:38:2d:af:12:0d:3a:ed:d4:cd:fb:be:d6:1e:c0:71:
         51:ae:d7:49:3b:85:94:89:6b:14:2b:13:26:3a:84:93:22:e9:
         3c:e5:e2:82:d1:d9:95:e8:0f:56:63:a8:f1:51:03:09:cc:48:
         f3:f7:66:31:ed:a9:26:cd:62:ea:eb:2b:c9:e3:87:a8:8a:e2:
         a4:94:42:00:0b:06:c1:d3:3c:65:fd:6d:8e:c9:9a:74:73:00:
         35:ed:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----