Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
File:                     sWrUSceuS9Isau5fvcCCMEL_-Pw.cer (raw, json)
Hash identifier:          UhWCjMaQStn2isxF9jDs896u1J6bHVTZOBGRIuSCCe8=
Subject key identifier:   B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521866D43EB3CA9315798D4FBFD0FE9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49046
                          IP: 95.130.40.0/21
                          IP: 2a04:91c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:86:6d:43:eb:3c:a9:31:57:98:d4:fb:fd:0f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:72:95:ad:cc:65:5b:02:0b:93:f7:c7:b4:
                    11:63:3f:98:0b:ac:b3:4a:d7:13:93:67:c9:a0:9d:
                    2e:d9:e3:90:b9:4e:d0:20:14:a2:78:83:58:22:17:
                    30:84:cd:a1:b0:2e:ec:45:c9:09:1f:92:ca:84:b1:
                    74:0b:b5:fe:50:c1:20:34:1f:4c:42:f4:b0:a7:5a:
                    fe:58:67:60:64:45:05:3b:9c:cf:ec:0d:8c:1f:49:
                    25:fe:32:fa:3a:c0:72:b5:13:22:cc:b5:9f:6a:aa:
                    7f:6d:13:31:b3:4a:7f:a2:17:45:7a:49:23:e2:0a:
                    55:7f:0c:da:21:7c:d6:8d:7f:64:33:c0:18:e9:d3:
                    7a:5d:5a:f0:65:49:8a:a2:8d:fe:f1:29:88:16:ff:
                    c3:d0:87:d2:32:c1:df:e4:bd:52:77:3a:95:de:13:
                    72:da:1f:f5:7d:c3:4f:9b:31:83:77:c9:0f:c7:db:
                    1a:53:19:ca:f6:19:1a:75:95:0e:3c:4d:62:34:33:
                    65:3f:b3:93:b8:77:dd:b1:67:51:1c:c9:2c:53:15:
                    41:6a:4b:53:5c:4a:16:20:f1:7e:a6:db:e4:b6:84:
                    77:aa:51:21:09:e9:d8:b0:4c:7d:00:48:83:76:4e:
                    08:07:c7:9a:54:df:f6:f9:b4:ba:56:1b:41:be:13:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.130.40.0/21
                IPv6:
                  2a04:91c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49046

    Signature Algorithm: sha256WithRSAEncryption
         61:2c:68:94:d2:fa:e0:4a:73:1e:9a:15:1e:b1:d0:5e:54:0c:
         68:dd:0f:b5:39:59:47:fb:45:f9:a6:9a:46:bd:d7:04:6d:3e:
         ba:82:2c:9d:6f:dc:0e:20:d9:61:1b:11:1b:f2:81:0c:ea:37:
         02:75:f7:62:3a:29:5a:37:98:1b:15:72:89:52:49:20:bf:9e:
         10:ca:6b:a8:0d:d4:ae:a4:60:b0:fc:63:10:8e:22:87:38:50:
         37:f9:18:e9:f0:cf:a9:3b:f0:9e:49:90:77:e9:39:82:2c:a3:
         8a:32:e8:cb:e7:09:ee:f7:92:3c:fd:30:1d:8e:c8:6c:ec:6c:
         e2:59:28:b0:3c:05:5d:1c:d7:68:57:07:b7:81:3e:56:a9:49:
         b1:e8:78:30:09:5a:3d:b0:ec:81:e0:25:f4:f8:04:0a:c9:43:
         e1:38:a2:83:5f:e5:1c:5d:9f:27:19:9a:07:f7:a0:8c:7e:30:
         bb:6f:f7:61:22:dd:fc:1f:27:e4:9e:9c:47:6d:ab:77:93:1a:
         86:a5:8a:8d:39:20:c3:fc:fa:0d:63:3a:8f:8c:67:c4:2d:6e:
         ed:43:b8:0e:de:11:ea:fa:53:bb:1d:1c:50:ad:df:e2:3f:66:
         37:b7:aa:1a:0b:82:0e:03:5c:5a:b3:60:2a:cf:6b:cf:96:63:
         05:a1:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----