Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
File:                     u1KMEmrtDX9aBpUOssIDNIaFahU.cer (raw, json)
Hash identifier:          g7LzZvEBQYLgNgOSMxb73u1XB75G1ZL3B4hkDg/eDiE=
Subject key identifier:   BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDB0650DA13AD86C079F8803090B9A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211073
                          IP: 91.207.176.0/23
                          IP: 2001:67c:414::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:b0:65:0d:a1:3a:d8:6c:07:9f:88:03:09:0b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:ae:d7:67:ff:c1:f8:f1:be:c2:03:68:53:
                    e4:de:48:54:b0:4f:54:cc:b1:5a:33:4c:f8:33:6e:
                    12:2a:cd:ac:e6:ba:49:f9:0f:7e:86:d7:35:fc:5f:
                    24:cf:56:a5:6b:55:e8:b1:77:15:a2:de:7b:78:ac:
                    53:df:33:5c:a5:1e:d0:b7:43:2e:6f:13:d1:30:57:
                    9c:a6:f8:7f:cd:2d:ee:45:12:bc:9d:78:8a:31:0f:
                    89:9b:ca:ba:21:7d:c7:1b:76:f6:ba:0a:6e:1a:bc:
                    1d:a2:d7:cb:b2:04:b3:d4:9e:65:73:9c:a1:14:cf:
                    3d:04:87:12:72:20:35:a5:2b:1c:02:b5:7b:78:95:
                    7b:8e:3f:dc:80:27:70:e1:98:ca:7a:e1:50:dd:56:
                    66:78:7e:d0:8f:e7:03:32:ca:e5:9e:e7:d9:65:b4:
                    b0:d3:dd:65:6b:b8:7e:1b:71:91:b0:30:7e:dc:d0:
                    8f:da:87:72:3e:38:fd:84:e5:fc:8b:16:43:e8:af:
                    71:8c:e0:d8:2c:ca:21:d1:5c:0c:c0:87:a3:2d:02:
                    ff:c8:b4:9b:84:e8:a8:42:0e:03:7b:0d:97:3d:69:
                    3f:db:19:7b:a3:23:b6:2b:7f:3a:32:be:8e:4a:f4:
                    fc:81:0b:94:00:5e:cd:15:14:79:cb:32:1d:79:99:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.207.176.0/23
                IPv6:
                  2001:67c:414::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211073

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:54:b7:67:70:3c:54:27:80:3e:e7:d6:3b:80:e4:a7:e7:
         dd:47:3f:82:60:ac:ae:8a:fd:31:5c:4b:4d:cd:15:56:c6:cf:
         ea:bf:16:1b:10:40:ef:db:59:51:e5:71:f5:31:4b:1f:d2:2a:
         3a:30:a4:d6:50:b8:32:9f:fe:72:cb:9c:f6:f6:a7:79:e3:45:
         0b:f4:40:ee:1e:54:8d:4d:40:bf:27:f5:b6:62:ae:ba:bf:93:
         2f:1d:3a:b3:0d:59:e3:1a:e0:35:f6:51:18:e9:f5:cc:02:00:
         38:2f:f1:e3:81:85:a2:b7:54:11:fe:04:bf:60:07:6f:cd:37:
         dc:50:ef:3d:94:46:e5:77:dc:c6:58:c8:c5:da:03:67:5c:2d:
         21:03:46:f3:e7:30:a4:1c:ea:65:a5:e2:a3:66:c7:27:e6:03:
         1c:a6:c7:90:4a:71:bc:31:3f:7a:0d:3a:de:c3:15:df:90:a6:
         19:66:36:ca:47:5b:6f:06:11:95:46:e1:56:0b:b5:d3:91:87:
         39:61:71:71:e2:00:01:29:ad:1b:2f:32:9d:91:0e:4b:0f:68:
         af:a8:0a:1a:4c:9f:58:c6:f4:6e:f1:8d:05:51:eb:e5:8c:72:
         cb:e1:28:08:53:2e:f4:7c:89:ff:82:4c:e5:5d:48:79:ec:12:
         58:bc:65:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----