Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uv5tfV8eRHjRoCUXHaawObJjAR8.cer
File:                     uv5tfV8eRHjRoCUXHaawObJjAR8.cer (raw, json)
Hash identifier:          10aOKnvU/maobvBJ02NTMk8GdOJA0YBwKh2pNTLo5ig=
Subject key identifier:   BA:FE:6D:7D:5F:1E:44:78:D1:A0:25:17:1D:A6:B0:39:B2:63:01:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747FD0571F595A5B1840CD18D070FD6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.76.152.0/22
                          IP: 2a00:e6e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:fd:05:71:f5:95:a5:b1:84:0c:d1:8d:07:0f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bafe6d7d5f1e4478d1a025171da6b039b263011f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:bb:41:af:d6:35:a9:37:e6:4c:a9:06:33:
                    77:80:1a:53:0b:9c:01:c5:53:22:7a:9b:b1:91:b2:
                    71:9a:be:c7:39:6a:66:b0:be:7d:a7:28:65:bd:c5:
                    51:f0:80:c2:79:e0:98:21:9d:ee:44:ad:4c:d3:98:
                    a5:3b:0a:8c:0b:bf:02:82:38:1e:7f:2c:e4:67:16:
                    19:b1:0a:66:6a:98:f8:22:78:d2:44:77:d5:c8:ad:
                    40:ac:cc:ac:de:27:3b:5a:bd:41:8e:15:3f:c2:53:
                    25:0f:7d:ca:18:fa:e3:d8:d6:fa:f6:c9:fd:0e:5b:
                    ef:20:6d:44:f1:06:7e:da:49:34:f4:c5:eb:9b:b7:
                    98:ec:50:d3:6a:42:e8:ca:15:7f:e0:c9:f1:e1:ff:
                    9f:80:4b:80:d0:d7:5e:83:69:0b:f5:fc:32:e6:eb:
                    22:e5:cf:5c:1a:ca:f6:72:39:1c:2a:2a:2e:1b:1c:
                    78:d0:37:72:84:d6:76:0c:9d:c9:33:1a:8e:a2:fe:
                    1b:a9:1a:bc:48:ce:15:2b:b9:a7:b5:96:a0:9f:be:
                    ad:b2:31:18:0f:6e:7f:7f:7a:40:4f:d5:29:63:e3:
                    df:bb:5c:ca:ee:b5:7b:51:fc:3a:0f:15:56:78:56:
                    89:be:b4:dc:ce:57:e9:36:02:51:83:ec:b3:30:d2:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FE:6D:7D:5F:1E:44:78:D1:A0:25:17:1D:A6:B0:39:B2:63:01:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.76.152.0/22
                IPv6:
                  2a00:e6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:2e:39:76:a2:58:71:3e:49:f2:89:32:b2:53:68:ce:0a:
         df:bb:fb:9c:fd:75:25:1a:55:ac:9a:26:2b:c0:0a:9f:ef:6b:
         ee:3d:be:ae:76:d2:d8:5f:f6:99:4e:46:b9:9f:ab:26:cf:c7:
         e2:db:c2:ff:29:4d:1b:67:8e:85:0b:33:b4:85:7a:99:05:d2:
         ce:a2:27:53:aa:d9:bc:a3:d4:a1:31:c6:e0:3c:c5:60:da:76:
         e1:fb:49:56:f5:46:c5:fe:4e:40:30:e1:e9:a3:e2:92:ba:af:
         5c:c8:3f:4b:72:d7:99:b0:32:56:b7:08:ce:e3:67:f1:6a:07:
         d4:0b:bd:04:cf:c7:80:e3:de:00:26:c0:39:bf:53:70:ee:b6:
         3e:f1:0a:38:f7:67:47:eb:1e:94:fe:f2:e5:1b:b8:65:d3:fb:
         2b:ef:b6:27:de:31:41:6d:00:b3:c1:99:f5:b2:6a:bf:7f:9a:
         8a:b2:a3:32:09:90:bf:a3:c0:7f:13:c1:37:d4:87:e2:14:a8:
         b8:34:d9:af:40:c1:95:ef:14:1e:2f:0f:ed:5f:8e:7d:1f:6f:
         65:58:97:6d:41:71:f6:93:df:8c:3a:73:6e:41:35:37:a1:fe:
         d8:f4:d1:dd:ee:0c:00:e4:92:f1:2a:57:25:7d:c4:f1:7d:85:
         06:b9:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----