Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
File:                     wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer (raw, json)
Hash identifier:          3RpYuCxLfca02javKAdFABHFWJH/Abmwq2YmUFclHsw=
Subject key identifier:   C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B228C3CD941A193210E6D0101869C2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39635
                          IP: 195.246.240.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:28:c3:cd:94:1a:19:32:10:e6:d0:10:18:69:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:15:28:cc:2f:f8:ca:6a:2b:64:85:f8:36:97:
                    b8:61:81:6c:d5:ca:dc:2e:3d:24:0f:55:33:29:74:
                    39:d3:17:09:36:fb:64:4c:9f:ec:80:a7:45:20:f6:
                    b3:c9:41:37:65:85:e7:6e:d9:0d:12:9c:76:eb:e0:
                    a5:60:1e:96:24:2b:09:67:af:b2:63:c7:c4:78:a6:
                    d6:58:13:70:26:f1:92:e0:08:a9:35:e5:1c:ad:16:
                    e7:52:b7:a4:57:ad:02:7e:4d:b4:fb:76:8b:86:43:
                    b8:09:5e:aa:47:39:47:1b:7b:07:6b:03:e0:03:9d:
                    10:f8:44:3a:9e:0d:78:ff:02:da:20:dc:27:0b:f8:
                    8e:4c:ca:be:eb:8c:57:a5:fa:45:7a:01:e0:4c:16:
                    59:6e:22:1a:c1:2f:0d:1a:06:4f:11:e0:2c:56:5b:
                    ac:5e:a0:a6:69:aa:f4:94:d6:83:28:ce:08:64:74:
                    7b:58:49:98:95:67:4e:24:0c:ba:c3:51:5c:28:25:
                    1c:44:51:bd:b0:50:72:c8:f1:12:f4:05:4e:6a:83:
                    3e:92:08:b6:1c:c0:cd:40:6d:a9:f2:b0:86:a8:30:
                    65:d2:02:7a:70:a9:82:f5:e2:3f:00:91:6d:63:7a:
                    bc:77:09:5d:fd:19:8c:de:81:93:c2:1c:2b:6b:a6:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.246.240.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39635

    Signature Algorithm: sha256WithRSAEncryption
         a2:fa:0e:ce:2a:1f:42:71:02:94:39:b6:41:44:bb:25:ff:1b:
         4d:2b:ef:5d:49:72:12:c9:6f:a7:6f:3f:fa:e0:78:91:fc:f2:
         48:8c:bf:b6:fb:7a:e2:2f:f4:86:85:df:04:3d:68:b5:e8:29:
         46:12:33:47:cd:b3:72:bd:22:4d:9f:1d:f1:60:a9:9e:66:ca:
         82:54:e3:15:1a:70:13:52:34:e1:1f:72:95:bb:93:59:7f:a4:
         d4:2e:ed:c7:98:de:4e:f5:f7:13:3c:4f:e3:40:09:29:b3:31:
         14:b1:80:bf:c3:4f:cf:e2:1d:f1:9a:e0:50:33:69:22:da:a4:
         ba:a2:20:2f:41:ba:fe:52:94:d9:eb:33:bb:f2:53:32:f1:ec:
         52:d8:58:62:3f:f2:04:39:d2:3c:5d:ba:a3:fe:a5:cb:6f:f6:
         26:19:a7:3b:ab:0b:76:a8:8d:0a:fc:aa:d3:62:7d:ed:92:4d:
         43:76:5e:d9:d1:dd:6d:00:28:2a:f9:4f:69:d6:8e:dc:82:98:
         3f:70:60:d6:38:46:08:3f:a9:d5:68:86:ef:32:af:48:40:3d:
         03:0b:2f:09:12:fa:8b:1a:ea:a6:e8:22:e2:b3:24:64:7b:b7:
         e4:8d:c6:10:6c:39:45:47:61:24:09:d9:e1:38:a0:cd:5c:c1:
         a9:7e:4d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----