Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
File:                     u7qOzNl-lhif9uM88RCmyaR3RZw.cer (raw, json)
Hash identifier:          mR8OMh7vR6v95CBZEkVsatrxTAlQMwbxhRslkJiiGxw=
Subject key identifier:   BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252187A62D95488539F4895F4EE67DDA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42421
                          IP: 77.72.184.0/21
                          IP: 2a03:c6c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:87:a6:2d:95:48:85:39:f4:89:5f:4e:e6:7d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:3d:cb:0c:61:f8:b8:81:6c:ee:c2:59:dc:
                    96:b9:10:83:33:3a:fb:2b:c4:65:bb:43:f5:6c:eb:
                    b3:0c:16:51:9a:ab:ca:52:cb:1d:b2:c9:96:11:e0:
                    20:a9:b2:3e:28:86:61:2c:0e:bd:ca:3b:ca:40:c5:
                    02:77:1c:1b:77:6f:b4:87:a7:bb:5b:d1:c7:56:a2:
                    c2:1e:91:44:cc:d5:0a:99:b7:3d:27:de:ac:37:f4:
                    93:76:37:64:99:9f:e5:f5:71:41:f0:ff:23:43:80:
                    9c:3e:e7:52:49:57:b3:99:eb:b8:8f:7e:f7:3a:17:
                    09:39:ab:d3:4d:34:7d:d7:16:51:f0:5d:91:14:4f:
                    c0:6b:64:41:10:5f:f6:4f:68:82:14:8b:a6:a3:80:
                    06:22:11:cc:70:c1:e5:a0:ea:bf:82:55:c8:dc:0b:
                    8c:2a:bc:95:b0:75:af:37:2f:d4:4b:d0:ed:9e:0a:
                    44:e2:a5:90:76:7b:9d:a1:41:c4:96:c6:de:d3:32:
                    9a:5e:af:be:d4:78:81:98:2f:0d:b6:e8:fc:c4:68:
                    ea:5c:c0:5d:08:d9:1d:b3:4b:a4:3d:e6:a8:6a:3c:
                    30:99:72:cf:5b:56:81:36:94:fb:14:c6:29:87:65:
                    22:ef:7b:20:9c:3b:78:2c:cc:1f:a2:ff:99:0a:a5:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.184.0/21
                IPv6:
                  2a03:c6c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42421

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:6c:b9:2c:5f:fc:17:d7:5c:73:69:fd:16:37:a4:99:9a:
         03:6a:24:5d:8f:34:74:f6:ea:e9:7e:c4:5f:da:3c:fd:80:c4:
         bd:0f:3f:10:3a:87:85:6f:ef:c9:bc:45:74:ad:4d:f3:56:f7:
         e2:e7:ac:91:24:5f:c9:16:24:35:1f:86:cf:c3:10:b6:6d:11:
         ab:ad:8e:1d:e6:be:69:1f:6e:33:61:65:f3:ca:00:cf:37:1c:
         13:fe:12:48:07:e7:da:fe:5f:79:06:21:e8:36:93:dd:40:99:
         ca:d8:e0:3c:99:45:e1:a3:2c:ef:c5:88:da:34:35:bd:4a:83:
         1f:27:b8:97:14:52:73:a7:ed:aa:76:30:b4:59:e4:32:da:b5:
         1a:71:1f:26:3f:49:c0:48:63:63:f1:7f:69:9c:b4:32:6e:37:
         ae:da:f7:04:15:e3:9e:47:05:34:1b:d9:b0:be:e2:70:92:b8:
         a8:b1:2c:27:68:57:49:2c:27:07:e7:e8:cb:a8:00:d5:5a:70:
         08:5e:9c:c1:57:4e:b7:0c:c7:e4:1e:35:f5:55:7c:27:ef:3d:
         41:35:cd:2d:84:81:95:5e:48:86:d8:91:16:60:3f:ad:af:17:
         eb:94:56:bf:e6:db:b0:83:a3:1b:b0:50:67:5c:43:72:36:a9:
         55:30:64:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----