Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
File:                     uef3G89S7W0Ft-s7dB7HkG533Mo.cer (raw, json)
Hash identifier:          LL0t/j5DZI5fXGARK5eAqny6UHr39M2Bs+NYNuYaxlo=
Subject key identifier:   B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425216B9EFF284DCA01A0FFD039BF5953
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 28865
                          IP: 91.235.104.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:6b:9e:ff:28:4d:ca:01:a0:ff:d0:39:bf:59:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:6e:81:25:a8:8d:d0:62:c6:00:2f:26:e9:
                    d5:c9:a0:f2:f8:6e:aa:7f:4a:f9:48:33:59:6e:2f:
                    1d:a7:19:b7:7c:c2:cb:d7:ea:07:05:74:24:58:9d:
                    e7:49:79:25:91:3f:6a:4c:8c:92:bd:08:26:81:52:
                    8b:80:0e:d0:2d:89:5b:21:a6:51:eb:d6:ef:28:9c:
                    3c:0b:c0:58:81:c9:6a:04:82:08:a9:fd:cf:1f:a5:
                    78:48:08:25:5e:61:de:15:4a:96:6e:7b:c7:59:e9:
                    fe:84:5d:23:c2:e7:0b:63:c5:f4:0a:a9:58:6c:45:
                    de:4d:0d:04:11:d5:28:32:a0:13:99:5c:cc:fe:87:
                    9b:5e:23:3b:9e:93:fa:f6:ff:b0:7c:c3:21:2e:2e:
                    ce:98:ff:12:4c:62:e6:5e:6a:f2:68:e8:28:8f:c1:
                    75:5b:7d:33:eb:9a:14:b3:94:d9:cb:4a:e5:f7:9e:
                    d6:a9:d6:01:26:62:fc:65:f0:df:0d:ef:f6:bd:02:
                    01:dc:8c:1f:d1:4a:4c:b4:8e:85:9c:5a:1f:9d:16:
                    85:7a:4d:7d:ce:1c:6d:14:ea:71:18:e1:2b:7d:94:
                    a0:4a:49:ed:76:d2:87:4f:29:20:7d:08:0b:9b:23:
                    a4:ca:73:86:fa:40:dc:ce:64:3f:99:21:d2:a1:3a:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.235.104.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28865

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:cf:70:73:81:67:06:3a:d7:b0:7e:1b:79:78:3e:7b:a5:
         29:61:f4:80:e4:9a:6f:bc:eb:de:bc:41:e4:f8:4a:05:4d:b9:
         a8:6b:6f:24:34:e7:32:b5:58:39:8d:7c:5c:80:be:ce:d4:68:
         42:45:bf:2b:79:20:5d:88:c4:c9:43:99:5d:eb:01:c5:ba:45:
         e2:71:c1:9b:5b:42:10:f3:ff:9c:58:5a:71:c1:e7:38:dc:36:
         6a:c5:e5:3c:2a:a0:43:4a:f3:24:81:a7:ab:dd:80:37:2c:04:
         44:cd:76:18:cd:59:a3:b6:67:54:42:5c:68:ed:e0:41:e3:c0:
         a7:36:30:25:3b:5d:e9:aa:e8:95:9b:17:cf:03:c7:8f:92:72:
         f8:b5:6e:f5:39:52:89:4a:23:4a:73:cd:b6:8f:33:d2:54:b1:
         ec:0e:8f:a7:2e:be:27:1a:64:7d:02:80:b2:5e:6d:23:8d:2d:
         ab:ed:ca:fb:a9:04:37:9d:63:12:31:f7:1d:6b:1e:ea:91:a2:
         ec:30:72:13:84:ce:66:97:7a:90:85:51:a8:dd:13:0d:ed:d6:
         06:32:a3:fe:03:e4:fa:f2:f7:1e:9a:0a:c8:de:52:21:75:c3:
         4d:07:d5:2e:29:67:09:d8:bd:1f:ed:fc:35:49:b4:4d:0c:93:
         0e:a9:9a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----