Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
File:                     u9zIw3chdOR7rIuTLlvse0ex2Ss.cer (raw, json)
Hash identifier:          k8HO4Mh71E1utcc5qTcb7rSZcnOYfsAW7LkJZf/ozRo=
Subject key identifier:   BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA61F0CAAC06199904EAFE4C812D69
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 21269
                          IP: 92.118.240.0/22
                          IP: 195.95.132.0/24
                          IP: 2a09:b240::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:61:f0:ca:ac:06:19:99:04:ea:fe:4c:81:2d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:d0:bb:df:78:ac:63:be:c2:d8:2f:7f:9b:
                    5e:91:24:7d:ce:4e:4d:eb:d8:4e:30:1b:fb:f2:d5:
                    cb:f2:50:2c:9b:2b:c1:cf:19:01:6d:29:0f:53:20:
                    3c:a0:7c:bc:d7:4f:29:37:1c:00:3b:c9:01:05:89:
                    7e:e8:89:73:9b:ca:0a:4f:60:79:83:1e:b8:35:37:
                    1e:e0:26:04:4e:3d:58:16:a2:bd:e2:65:de:a5:dc:
                    48:e9:bf:12:16:74:30:53:5c:e9:4e:17:45:ee:e3:
                    0b:f7:fd:65:d3:99:cb:cb:4f:91:db:a2:97:a1:0a:
                    43:2e:49:1e:f8:1f:7c:ed:38:dd:4f:1d:98:91:5a:
                    bd:b2:e4:9f:73:c1:03:44:00:27:50:bc:4b:ed:9f:
                    49:34:ea:6b:48:ac:7b:89:41:1b:8e:0c:36:f1:5a:
                    ef:04:4b:68:7f:cf:15:22:ea:88:e9:0b:96:df:bf:
                    49:cc:f9:b3:5e:60:9f:31:6f:eb:52:86:3a:5c:f5:
                    32:06:65:ba:88:ab:8d:9b:b4:6a:3a:51:90:fc:f9:
                    c6:9e:a7:8a:68:70:88:bc:e2:ac:b1:87:fc:a0:4a:
                    bf:9d:0a:66:cf:07:9c:7b:34:3e:3f:e0:74:5d:02:
                    02:ff:aa:c5:3a:0d:17:48:1e:a3:db:aa:9d:19:8a:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.240.0/22
                  195.95.132.0/24
                IPv6:
                  2a09:b240::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21269

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:1f:7b:3c:ee:31:a4:df:16:df:d4:e1:e1:a7:80:0c:29:
         95:93:e3:dc:6a:04:9d:83:6c:0d:9a:88:c3:17:c0:e5:44:18:
         d0:a0:db:25:87:3b:93:81:ac:fd:cc:b9:5d:d4:af:7d:5f:56:
         f6:93:9b:dc:6d:82:18:12:d5:15:b2:a7:67:2e:c4:19:f9:10:
         d1:a1:ed:a8:12:d3:3e:18:36:c7:42:2b:5e:b3:5d:1c:d9:9d:
         cb:f5:d4:c7:0c:31:fc:7b:37:33:40:c7:a2:82:72:54:5f:8e:
         c2:2f:6d:a2:5b:6f:1b:43:5a:29:9f:56:a4:11:01:0e:86:0c:
         71:35:7d:81:c7:56:60:eb:a8:45:ea:fa:f3:e6:4c:ad:f4:13:
         ee:d5:74:ed:78:8f:ad:e3:91:62:24:3b:97:f3:94:a7:bd:95:
         7b:9c:b5:ce:33:ef:0a:d9:8e:29:58:fc:83:a6:3e:b5:6e:34:
         f5:3f:e0:ba:0d:b2:04:88:a5:0a:c9:94:86:f5:3e:56:0d:b3:
         04:c9:4a:5c:59:a1:50:ff:2e:e1:88:b9:22:3a:4b:4b:d2:ee:
         4a:69:be:f0:b9:f1:7c:d7:31:be:9c:08:21:28:c0:5c:aa:39:
         85:e8:a4:db:83:fd:34:13:70:2e:46:85:48:69:e1:e3:78:60:
         3d:8e:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----