Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
File:                     uUTKLZktd4WAC91VJNPhE4PZ8d4.cer (raw, json)
Hash identifier:          CTXEcGu0/4ls6rkhEceu9hiAkMFV9Q2tImJyRxiIf4E=
Subject key identifier:   B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194DBD859BCE39655253273B45E555D5B7F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 06 Feb 2025 15:19:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 25353
                          IP: 46.235.56.0/21
                          IP: 81.201.192.0/20
                          IP: 2a03:2600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:db:d8:59:bc:e3:96:55:25:32:73:b4:5e:55:5d:5b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  6 15:19:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:be:67:b5:42:7e:54:66:cb:dc:4d:71:da:
                    3b:10:c5:49:aa:f1:6b:cc:89:cc:9a:53:e7:11:30:
                    f8:75:5e:03:fa:13:01:9c:77:56:d5:40:3e:ad:22:
                    25:3b:24:66:0f:0e:cf:23:a3:95:f5:dd:ce:ed:16:
                    2f:9a:33:b7:4c:2b:b5:7d:86:23:c9:28:e7:c4:56:
                    09:38:14:47:5f:a5:76:1e:aa:88:0a:8f:e7:eb:6c:
                    7b:01:34:fe:5e:9c:fc:53:a4:a0:72:5e:b9:d2:af:
                    c3:70:09:1b:73:d8:58:2f:7b:17:3a:aa:ae:80:b0:
                    a2:3e:0b:e7:73:bc:f6:36:37:46:dc:91:9f:de:16:
                    79:db:85:b0:af:4f:18:28:bd:44:80:ea:63:89:af:
                    6e:13:13:f3:d4:74:7c:bc:a9:81:d2:dd:b3:8a:5c:
                    37:d5:ec:06:ec:8f:cb:92:b9:d0:e4:0b:68:52:41:
                    c0:7a:a4:4d:b2:8e:3f:2e:ae:98:40:2b:10:5b:a2:
                    eb:29:72:de:ec:db:41:7a:90:11:f9:8a:cc:88:12:
                    08:32:88:fd:c2:d0:80:91:e5:25:5a:07:e7:9f:45:
                    78:d5:c8:dd:61:fb:16:5c:40:79:0d:25:8e:67:ff:
                    f6:e6:e3:e9:18:af:f6:dc:ad:63:7d:5e:94:c7:e0:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.56.0/21
                  81.201.192.0/20
                IPv6:
                  2a03:2600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25353

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:d1:b2:e1:ce:76:e9:94:c2:a5:78:f7:a9:29:da:ed:6f:
         20:d4:cb:03:55:b9:71:12:c7:f9:90:30:91:ab:a6:5e:4d:6d:
         bd:2e:dd:9d:39:14:f5:87:7c:5e:6a:44:43:77:35:58:f5:47:
         94:68:6c:67:6c:7e:b2:e5:67:60:65:66:84:8c:11:71:f4:9a:
         0f:6e:e0:8d:90:ab:53:8f:7e:9c:81:e2:5c:19:e3:fc:7e:e5:
         57:d3:65:98:77:a3:44:03:c7:e0:61:ef:31:f2:5a:2d:ee:ae:
         ea:fd:7b:8a:0a:a2:94:ed:d5:f3:b7:3b:74:b5:2b:ea:dd:bf:
         f9:02:e2:60:e8:7c:52:5c:7b:7a:0d:4e:5d:35:2a:e6:91:7d:
         fd:90:36:e5:48:80:fb:94:b6:d9:bd:94:ce:e5:0d:b0:91:93:
         ed:60:9e:c0:60:01:da:f5:0f:1e:ca:4e:2b:f2:41:ca:d2:51:
         07:ed:bd:b8:8b:f3:dc:dd:f4:2a:15:98:7e:33:b9:57:69:13:
         f3:e3:af:60:f6:66:9f:25:df:6d:1c:fe:d7:39:37:df:7a:18:
         2c:c3:28:43:31:47:08:fe:f6:28:1d:c9:1a:14:70:4b:68:09:
         40:71:f4:75:0f:4d:e4:fd:70:b7:d0:57:1a:29:54:27:3d:a7:
         ce:7c:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----