Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
File:                     UF4vLV5wk_-NQAOgK30-ExznChI.cer (raw, json)
Hash identifier:          LF/vlBG/XEtnixZVk6IspHpX39Xnw3VUcGlglQD652M=
Subject key identifier:   50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B9EC0FEF61309D21042524AE0044E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 178.255.240.0/22
                          IP: 2a02:2150::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:9e:c0:fe:f6:13:09:d2:10:42:52:4a:e0:04:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:66:05:b8:a6:54:1d:14:e6:a4:8b:a7:12:
                    ac:d2:16:3e:5c:aa:cc:98:6b:a6:f6:cc:cd:81:fd:
                    ba:44:95:1d:a9:f0:c1:68:6b:15:6a:1a:73:68:8c:
                    01:39:09:43:27:55:54:4c:3f:75:db:b9:c3:c9:8c:
                    24:62:d1:f5:90:35:71:ac:90:61:ad:48:1b:10:80:
                    bc:a9:46:e3:47:7e:05:d6:5f:b4:70:f1:bc:42:56:
                    0d:33:e8:ab:4e:02:41:20:76:6e:c4:81:ba:5e:90:
                    dc:cb:f8:1f:f8:df:24:27:7b:5d:35:3a:22:4e:d5:
                    19:90:99:de:ca:ac:1d:23:a5:f5:5f:b7:34:74:4f:
                    9a:d5:f2:63:b0:89:4a:17:ea:03:21:44:35:d3:46:
                    17:39:75:c2:6c:21:2f:90:99:97:ee:db:30:78:b7:
                    16:bf:c8:5e:f3:c5:b3:9a:85:89:62:e2:0e:9e:07:
                    f5:c8:ef:75:ed:dc:44:55:fe:54:d3:e0:e5:31:4d:
                    53:52:00:48:16:99:43:ed:59:d5:08:ac:55:09:a2:
                    c2:a1:c1:ea:22:9b:3a:c1:32:27:be:d9:fb:bd:0c:
                    24:9a:58:b4:12:76:92:a3:d2:62:2b:5c:f2:92:c3:
                    db:f8:28:5b:5b:65:61:60:60:82:77:f5:95:76:eb:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.240.0/22
                IPv6:
                  2a02:2150::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:78:10:54:25:c6:06:a0:c8:d8:e8:ee:f2:56:46:ef:89:54:
         49:da:20:a4:8a:c7:e8:e3:ca:a8:fa:08:42:e8:dd:ba:40:10:
         8d:2c:a7:0a:d6:3c:af:00:64:36:5b:63:f2:65:bc:c7:0c:00:
         55:36:60:32:48:b5:a0:a8:1b:1c:86:c8:b1:61:b4:e0:91:a7:
         b9:7d:60:b7:d0:85:c9:1b:65:b6:a4:07:93:46:0e:8a:6e:2d:
         22:35:31:b1:6e:65:db:46:ab:0e:bc:12:68:18:5c:d7:25:22:
         4e:e6:fd:54:7c:9e:02:51:98:30:f6:3a:d1:2a:db:7e:9f:b2:
         09:83:bd:9c:3d:9f:f8:06:60:7d:06:9d:89:aa:c3:40:5c:df:
         2c:89:74:7b:ee:09:38:af:0e:77:25:98:e0:ae:cc:d1:f0:ad:
         2d:d3:e6:c5:e5:c0:e6:6c:f3:08:a7:b2:0f:3c:ea:bf:2e:62:
         45:3b:30:0e:d0:ff:37:d7:92:32:5a:54:77:f0:de:4d:cf:a1:
         3a:9e:43:a4:6e:27:2b:db:f6:28:58:1b:98:db:db:98:2f:ea:
         97:5e:cf:08:8f:4d:8e:ca:ab:09:01:7e:aa:50:2d:e5:ab:f3:
         5a:91:80:a5:e5:0d:bc:da:44:66:5a:32:54:e7:d6:a1:30:b1:
         21:93:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----