Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
File:                     u9Qr14Mqar4W4VIqLX5OQNProKI.cer (raw, json)
Hash identifier:          +9ESlpIFC4VkGnhRmdgBHKZkCn16TCvOknga8dYs7iU=
Subject key identifier:   BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5A750364D5BA25D87C46775B61399
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206339
                          IP: 185.188.244.0/22
                          IP: 193.28.216.0/22
                          IP: 2a0b:d380::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:a7:50:36:4d:5b:a2:5d:87:c4:67:75:b6:13:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:32:1b:3e:fe:99:eb:8c:db:07:b5:8b:da:
                    f9:79:27:80:e8:2b:ee:9f:81:a4:02:1a:3a:0f:2e:
                    6a:98:22:36:fe:e1:24:56:03:25:07:96:04:97:96:
                    c2:7d:9d:83:a9:9d:62:7c:9d:b5:9c:14:e8:4c:78:
                    e0:b3:ee:f3:ec:ed:c9:f2:5f:ef:8b:df:f1:12:ff:
                    cd:89:26:7f:cb:06:27:fd:31:7a:59:b0:c9:08:1e:
                    48:5a:fe:d5:6a:61:06:2e:47:ee:d0:b4:ce:4b:29:
                    50:ea:66:87:23:bc:17:96:29:e7:1e:62:4c:03:9a:
                    a1:9b:f5:32:69:93:c0:15:b1:1c:88:60:75:40:02:
                    a3:2b:e2:91:f4:73:a0:e0:66:3c:bc:ee:d6:d7:54:
                    3a:6b:9b:68:a5:d6:f6:fd:b3:e3:8c:76:04:e8:e2:
                    be:68:cf:b6:09:b7:76:67:3b:3f:8c:9f:c8:b6:12:
                    ae:b8:f8:d0:76:1a:d6:2b:54:a8:f7:41:bb:e0:e8:
                    ba:fe:4f:18:fd:ec:06:9b:9e:07:7d:82:59:24:a3:
                    8e:7f:7b:3f:0a:74:1b:22:94:67:16:68:5f:46:f6:
                    e1:c4:7e:f7:2f:d4:39:25:09:7b:86:a4:56:1f:83:
                    d8:77:e2:41:e5:0b:d8:b6:9a:87:53:25:2a:7d:69:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.244.0/22
                  193.28.216.0/22
                IPv6:
                  2a0b:d380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206339

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:f3:a0:e8:db:35:70:8e:f0:a8:ca:7b:e5:67:7e:f6:24:
         e5:6a:92:e7:02:b8:66:ac:a7:e2:14:a2:ec:39:0b:cf:b6:34:
         5a:db:ec:26:b3:2f:db:c3:1c:d3:1a:bf:32:41:c1:1d:3c:af:
         b6:4f:31:e0:af:b0:79:e8:54:fb:4c:7a:1f:7b:07:1a:ae:70:
         99:42:4e:23:2a:53:4e:f4:d2:d8:08:d2:4c:10:19:2a:3f:b0:
         b4:e6:d9:2b:cb:48:bb:02:19:31:10:6a:91:cd:49:39:42:8a:
         08:01:d3:fb:6d:d2:c3:bf:1d:39:48:94:c7:f1:40:21:ae:16:
         2f:cf:ff:96:37:46:af:c7:94:2b:65:7a:71:63:c7:7f:b7:c8:
         fe:5b:5d:56:92:dd:58:cd:e0:6e:d3:d8:a4:f8:8d:12:8b:c5:
         be:96:66:19:8b:93:a2:90:61:a6:37:94:da:49:e5:11:ce:cc:
         c4:39:b2:a8:cb:b4:d7:76:5c:73:a8:6a:32:b6:af:34:b0:ec:
         29:07:6f:56:cb:0b:ff:db:cd:ac:64:7a:48:4c:74:03:46:58:
         c3:a5:a9:ac:bf:d2:85:69:30:d8:4a:00:99:2f:0c:b5:66:4c:
         14:10:dd:58:b8:03:ec:3e:3e:b4:91:4c:28:d4:56:22:93:84:
         98:6e:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----