Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
File:                     u0cxiEug9XP6YYtuetUDoSyWWvM.cer (raw, json)
Hash identifier:          bRB78lnpZXnA/xsiqLYm87Sw58Epo2mD5b1jPUMbsSM=
Subject key identifier:   BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5A7D32761A0E4039C08F00581B5AB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200308
                          IP: 185.248.28.0/22
                          IP: 195.189.245.0/24
                          IP: 2a0d:dd80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:a7:d3:27:61:a0:e4:03:9c:08:f0:05:81:b5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:ec:6e:14:74:96:5c:91:47:e2:d5:24:8d:
                    65:60:2e:d1:bc:7f:44:36:36:63:18:db:be:b1:ed:
                    bf:5b:5c:47:fd:8d:90:22:0b:a0:fa:3d:a2:d6:b3:
                    a7:59:9b:79:27:ef:6f:e5:95:31:0c:46:53:65:8f:
                    bb:3b:78:81:c6:bc:44:13:be:01:55:8d:36:1b:4f:
                    26:99:8f:bb:fe:88:98:7c:d8:1c:65:7d:d4:d4:85:
                    11:b2:8a:f6:1f:ce:dc:30:cd:bf:e8:66:a8:eb:5a:
                    40:f7:5c:00:1c:bf:a8:0e:41:40:05:71:7e:c6:07:
                    52:f1:7b:0b:f1:f2:ff:f5:88:e9:f2:2c:be:00:c9:
                    07:9b:8b:45:4a:58:30:3d:13:57:54:f2:15:5e:16:
                    2c:23:78:1a:0e:5b:b1:27:bf:90:66:85:05:82:12:
                    62:f5:b3:18:4b:cb:aa:4f:eb:fb:79:3e:62:fa:d9:
                    f9:ac:b1:14:13:f0:77:85:b8:c9:3f:bc:98:3c:93:
                    59:4e:03:7b:d5:d1:4b:c7:77:ed:e8:97:06:c9:6b:
                    85:4c:c1:a3:d4:84:41:d1:ef:b0:df:6d:5c:26:2b:
                    37:6c:64:95:71:de:65:1b:fe:c8:13:e4:51:10:13:
                    33:bc:7d:9e:a2:27:dd:bc:f6:9a:a8:e4:ac:3e:ee:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.28.0/22
                  195.189.245.0/24
                IPv6:
                  2a0d:dd80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200308

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:88:ca:c1:6f:de:61:a5:ab:bd:d9:14:fb:6b:f1:9a:af:
         b3:ab:d7:ed:ed:cf:b1:cd:b2:d6:df:c6:34:2f:b8:1c:15:f3:
         04:ed:89:5c:7e:e4:0c:62:32:17:80:d0:54:a0:00:61:d8:ff:
         c0:95:8f:69:d9:38:fd:67:c2:5a:0c:ed:67:6a:72:c7:a6:d6:
         5f:38:f4:f5:39:87:22:4b:11:a2:37:b5:b7:1c:d2:85:e7:6f:
         62:11:7f:02:0b:8a:de:52:cb:b7:1f:60:af:e4:f4:a8:64:7a:
         59:8e:d1:da:3e:58:a9:df:6c:83:18:78:ef:be:11:b2:0f:db:
         08:4d:08:2d:95:6e:1c:46:15:6a:83:04:fd:2f:c4:26:9e:4f:
         10:68:78:48:30:88:88:db:da:0a:34:b2:13:9e:db:96:2e:4a:
         85:d0:de:31:64:f3:98:b2:c8:0e:05:5f:38:fe:b9:8a:4d:b4:
         f2:f0:e0:de:67:33:16:fe:5d:31:32:a3:22:e3:90:f0:25:2d:
         29:03:26:82:48:cc:21:68:b1:e6:43:eb:30:be:c8:82:fa:64:
         d3:87:34:8f:af:e9:ff:6d:3e:ae:d1:87:7d:33:ea:b8:79:4f:
         b0:af:73:09:c0:de:b3:5d:d5:0b:13:30:f3:5a:47:53:8e:9e:
         bc:81:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----