Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
File:                     u_pCfUICOv2oiOhBX07c97ffGwU.cer (raw, json)
Hash identifier:          Fwby/sWrdBWd7L4GH+tNkHmOisoS0kVG8vC9MB79efs=
Subject key identifier:   BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9C9E87858E949712B08837A8CE87C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205278
                          IP: 195.8.107.0/24
                          IP: 2a12:e3c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:c9:e8:78:58:e9:49:71:2b:08:83:7a:8c:e8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:3b:bf:af:02:df:28:e7:ff:e1:bf:f1:e0:
                    92:e5:6d:ec:9a:e6:c2:96:f9:79:20:e7:4c:15:3a:
                    2f:d8:c9:8a:c3:05:e5:8e:52:2e:8d:2c:fa:8d:46:
                    64:23:73:40:68:1c:8d:26:b3:a2:6c:fc:ae:0e:d1:
                    c9:00:bd:96:5b:4b:52:59:94:79:d3:38:54:31:3f:
                    b1:ec:d5:48:d4:35:64:bf:d2:58:67:34:26:99:13:
                    c5:81:16:95:3a:cb:7d:bd:b1:0e:50:1e:7c:a6:ba:
                    e7:76:e3:3a:0a:98:01:e3:70:ea:af:9f:08:3a:1a:
                    a0:b2:06:e4:a2:9c:1b:8d:f7:46:60:7d:b2:5a:0b:
                    60:06:e1:3f:a6:10:15:09:0f:d9:06:5c:2c:a5:36:
                    83:df:a8:73:7b:2c:17:0c:c6:48:f5:25:79:10:84:
                    c1:d5:34:ee:c4:19:0b:93:78:f9:ea:71:be:9f:14:
                    6a:5e:09:f0:2b:ac:e6:d0:7f:33:a3:61:bb:d2:05:
                    60:7f:58:f3:92:00:b4:9c:4b:09:fd:32:fa:be:7e:
                    6e:78:97:9d:68:cc:54:e5:87:2f:af:ed:33:09:28:
                    7d:cb:d0:40:d7:51:9b:fc:99:b0:13:5e:f9:ba:df:
                    9c:cb:92:3b:df:56:94:9e:d7:8d:d5:46:14:7b:13:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.107.0/24
                IPv6:
                  2a12:e3c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205278

    Signature Algorithm: sha256WithRSAEncryption
         a5:fa:c1:d8:38:ac:c6:a0:a1:b6:e7:1f:02:d1:a3:0b:8e:35:
         82:99:ed:63:2f:33:b9:98:08:00:e8:8f:63:6e:f0:71:12:aa:
         0b:58:59:65:d2:a9:55:7d:b7:ff:40:9e:32:a4:88:2f:a9:45:
         d9:22:2f:54:bc:ed:a1:57:06:6a:fb:fa:fc:f3:74:07:a9:ec:
         a1:b5:2e:02:57:3c:5f:24:44:f3:c0:8d:9d:cd:2e:1b:83:ca:
         14:d7:aa:c8:cf:65:93:82:a1:51:f1:c8:05:c9:ae:9c:96:72:
         7f:10:a7:d2:58:d6:e3:4d:8e:89:c4:1b:5a:8d:50:fe:68:8e:
         59:a5:4b:47:08:d0:32:24:f9:af:ff:a4:dc:8c:f1:d2:d0:d0:
         75:0e:da:4d:4c:a0:b9:3d:ba:11:31:00:65:8b:c5:c8:de:8d:
         57:09:d9:6a:cd:c6:7b:25:bb:e7:6f:ee:27:b4:7a:79:7f:31:
         f5:6d:39:a3:9f:01:d9:56:b0:a7:72:0a:63:63:e2:94:dc:03:
         69:fb:b2:76:09:c4:d3:67:03:32:e1:8b:f4:88:0a:fd:e9:f8:
         f6:e1:fd:3c:62:59:75:26:a5:4e:49:4a:e9:7a:76:34:be:b5:
         59:5a:af:0f:b7:23:b4:58:3c:07:80:cf:e1:4d:14:13:ea:c6:
         13:96:b3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----