Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer (raw, json)
Hash identifier:          yStIY2ABHRcI1r9PmyC0TYAzMX8z3SBsxEU9Ui5WCGk=
Subject key identifier:   BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942369A733A15259C52CFF51492E69F6EC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210036
                          IP: 193.36.104.0/22
                          IP: 2a0d:d740::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:a7:33:a1:52:59:c5:2c:ff:51:49:2e:69:f6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:7a:f2:fd:0d:ea:37:be:80:81:b0:39:46:
                    6e:92:15:3c:45:aa:fb:0d:36:e5:10:80:84:73:76:
                    92:51:56:07:a4:66:63:5f:91:a1:57:49:da:2c:4f:
                    31:ad:fb:e4:e8:7d:fd:14:dc:74:69:5b:38:33:81:
                    45:a4:24:18:3f:75:fd:85:1e:c0:d6:fc:4f:df:70:
                    f4:f2:18:18:33:f8:7e:e1:9b:63:3b:a9:ac:0b:60:
                    4c:67:d4:00:81:ef:c6:7c:f2:4c:3d:34:cc:f3:77:
                    29:8e:03:f3:fb:b0:47:7c:4f:18:e4:da:aa:db:78:
                    ec:ef:da:35:80:7b:fa:d1:85:08:13:48:e1:d7:81:
                    c5:f4:99:36:ba:62:50:fa:80:30:2c:3a:49:7c:c6:
                    7f:77:c8:b9:32:30:99:6b:78:98:03:0c:22:17:ec:
                    d3:5f:fd:6b:0b:67:d0:d1:e2:74:22:e3:72:3f:06:
                    0a:72:f4:0d:f8:04:96:3c:26:b9:14:fb:4a:87:57:
                    dc:5e:db:21:2f:99:d5:5e:4d:6f:19:64:23:25:7f:
                    4c:2c:6e:f6:50:59:83:a3:0e:0a:9b:67:f3:81:8a:
                    f2:e9:25:ee:3f:ea:bc:fa:75:60:6e:8b:c0:74:e7:
                    44:cf:bb:a8:b1:2c:d0:66:48:b8:4d:71:ae:bf:0a:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.104.0/22
                IPv6:
                  2a0d:d740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210036

    Signature Algorithm: sha256WithRSAEncryption
         3e:f1:7d:42:79:13:c6:01:81:fd:3b:39:28:0f:db:6d:a8:22:
         e4:0a:76:22:bf:2b:1d:15:aa:57:40:6a:1f:cb:37:23:3a:ed:
         19:34:4e:74:35:ee:3d:69:86:98:49:67:87:9a:ff:da:2a:22:
         74:d3:2b:d3:d4:94:49:70:55:21:c8:fe:4b:a6:86:b7:4c:b0:
         d9:4a:e4:ed:85:a9:b4:1d:74:a7:ca:0d:fd:49:be:be:86:8c:
         2d:a1:83:23:e9:2d:3b:c8:cf:b2:1a:8b:e8:e7:c7:56:b9:ea:
         4b:fd:e3:1a:df:f0:e3:a8:4d:1b:a9:88:28:6e:da:ff:b5:ff:
         f9:75:fa:85:e2:1b:4a:53:96:73:a4:6c:89:c5:cb:8c:b3:bd:
         58:a8:bd:36:71:8d:25:09:45:82:ed:ba:af:e8:6c:2d:de:47:
         c3:8c:4c:a1:98:19:f4:d8:46:08:01:a3:5e:13:5b:35:36:33:
         f7:11:52:c0:d7:38:dd:17:11:d7:f9:66:7a:b1:1c:c2:09:e2:
         8f:5c:df:85:11:a2:bc:88:5d:8f:16:96:84:fa:28:ad:fd:a4:
         1d:8f:ee:35:94:5c:48:4d:e6:7c:23:79:68:73:34:a4:17:13:
         64:33:29:57:ad:31:df:60:63:71:e8:9e:e6:12:e2:65:cc:b6:
         a2:bb:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----