Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
File:                     wuJKnaa-B1Tt3BR41pTm2p4Volg.cer (raw, json)
Hash identifier:          HipBCnpdlLu25/HpocttiNtickcxYNt/FhX0Rj84TRo=
Subject key identifier:   C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FC5B958DFFE916FF0DF1EB90BF5FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206619
                          IP: 185.181.76.0/22
                          IP: 2a0a:c680::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:c5:b9:58:df:fe:91:6f:f0:df:1e:b9:0b:f5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:4b:8b:18:9f:e6:7a:25:1c:af:99:af:3c:
                    f6:1b:1d:23:50:00:bc:7c:3c:0a:e4:ad:24:b3:e8:
                    58:b5:92:8d:23:e7:89:3b:65:70:be:a7:97:8c:8d:
                    a7:5f:1e:e9:92:00:27:4a:7d:12:aa:07:03:34:8c:
                    9d:cc:ee:84:2a:bd:55:70:c4:3a:34:c0:a0:f8:f9:
                    50:10:d6:f0:1b:63:5e:ef:57:82:d9:2d:23:75:a1:
                    11:e4:11:86:9a:dc:2d:31:07:b3:10:09:08:de:90:
                    68:61:89:57:54:8d:83:64:ff:2f:5d:89:25:a7:06:
                    f6:a2:74:e0:93:d6:48:e4:e3:97:88:7c:fa:0f:32:
                    6e:19:c9:7f:eb:eb:39:82:b8:08:33:f4:be:14:6c:
                    13:d1:55:04:1c:9a:30:55:ff:49:64:95:e6:1d:56:
                    26:7b:96:1e:d5:c6:f8:c7:b1:ea:98:14:6b:32:14:
                    f0:e4:19:70:d4:0a:3c:8e:3b:80:e5:79:38:58:8c:
                    4f:aa:5d:b8:93:85:eb:7d:75:3a:0a:ae:17:c3:78:
                    0a:c9:55:f4:ed:fe:39:df:0f:52:8a:6f:ad:dd:dd:
                    0b:61:ee:af:1e:9d:11:5d:0a:0f:95:dc:f0:12:e9:
                    a3:89:0c:d4:7f:01:c5:39:72:89:a3:ed:e5:e3:3d:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.76.0/22
                IPv6:
                  2a0a:c680::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206619

    Signature Algorithm: sha256WithRSAEncryption
         1e:6a:79:34:2c:0c:e6:db:c1:c5:be:ea:cb:b7:63:a4:10:ae:
         10:54:78:50:78:bb:d4:be:95:54:e3:8c:39:24:63:28:f1:eb:
         1b:b0:fa:8f:a4:24:66:87:d3:ed:ec:43:6b:0e:3e:1e:fb:a7:
         14:34:a5:f5:4a:eb:88:58:2d:5b:aa:83:0f:cb:cc:26:05:6b:
         e4:60:e9:3c:3f:86:d2:b4:50:21:82:21:88:95:6e:86:f1:3c:
         af:31:29:c3:9c:45:52:2b:99:af:41:03:2e:e4:a5:21:16:c5:
         07:29:19:93:f4:8e:6e:2a:10:9d:52:8f:6b:e1:f6:2b:9a:f8:
         73:e4:f2:f7:0a:d6:c2:05:b0:b6:1b:46:68:54:3b:ec:13:2f:
         83:a2:cf:ec:d4:d8:99:94:7a:f3:6d:17:a4:34:47:69:e3:c6:
         60:af:9a:30:a9:51:82:31:26:3c:75:f3:a7:08:e6:95:94:86:
         54:ac:f2:4f:88:6d:5e:bf:51:7f:19:d0:26:c2:a5:28:b9:00:
         c0:42:52:27:68:0c:b2:e9:2e:16:69:c1:2c:0c:dd:ee:bc:7e:
         db:5a:60:99:f8:f7:6c:fe:f9:c2:05:c3:72:05:7e:d1:7c:c5:
         a5:cf:ec:a6:d9:2f:5f:a0:00:dd:ec:fb:a7:d9:18:7d:34:c9:
         c9:e1:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----