Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
File:                     0YZHAF-osG5H7i77_e3Jegx3Vfg.cer (raw, json)
Hash identifier:          g3UdNH6WWmnonR1e2or1gH9fKZQQ/lAu9cOoojMtWzQ=
Subject key identifier:   D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C75A4A89ACD60AC211608BEF144CB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205206
                          IP: 91.207.214.0/23
                          IP: 185.224.16.0/22
                          IP: 193.29.201.0/24
                          IP: 2a0c:cc00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:75:a4:a8:9a:cd:60:ac:21:16:08:be:f1:44:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:8f:31:8e:f3:84:27:73:08:f8:78:25:09:
                    bf:6b:8d:69:d6:57:1a:53:69:4e:16:54:99:8a:0e:
                    b8:b9:95:cc:0c:47:20:7b:b2:af:6c:2f:26:ea:f4:
                    bc:6d:2d:53:48:3b:81:0b:e1:a7:09:13:a4:f6:5f:
                    2e:a8:f5:3a:03:df:98:40:f5:86:7a:18:f1:41:91:
                    a1:f3:4f:dd:a2:f2:71:2c:75:aa:b2:86:15:6e:c3:
                    a0:92:48:fd:41:35:fe:b2:6d:77:12:50:f6:dd:db:
                    2e:46:d5:11:c8:88:57:a4:8a:50:3c:d0:0a:d4:12:
                    14:28:e7:2c:51:d1:bc:fa:fc:f6:94:14:f1:06:89:
                    9c:c6:c8:53:bd:3f:61:25:d4:84:f9:0a:05:44:05:
                    c9:e1:be:c2:d9:a6:2a:bb:cd:d6:82:36:db:f5:4c:
                    c5:90:da:11:62:f6:09:95:c9:fb:4d:0f:12:08:73:
                    74:75:fd:f3:f0:d5:27:d7:cf:43:dc:d6:b5:b3:56:
                    6a:d5:88:2d:40:49:5f:d4:b6:e1:ac:1f:26:0f:a8:
                    8d:f9:c4:91:76:54:a6:90:96:f3:c0:b7:17:5c:2a:
                    90:4e:17:81:f3:47:af:9e:42:0b:de:dc:47:c3:61:
                    4e:7b:e1:17:8e:56:30:2f:af:23:11:28:5b:14:53:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.207.214.0/23
                  185.224.16.0/22
                  193.29.201.0/24
                IPv6:
                  2a0c:cc00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205206

    Signature Algorithm: sha256WithRSAEncryption
         15:46:9b:bf:43:ae:03:27:6a:8e:34:f6:10:2b:1a:ee:8a:e7:
         e9:7a:0e:f5:64:03:d2:0e:70:cc:b1:bd:c0:e1:a8:d6:6d:0c:
         98:b9:1a:fb:4b:6b:f2:07:7a:6c:d0:75:9b:8d:39:00:59:e4:
         09:b6:34:2a:94:73:4a:79:1b:cf:ad:df:42:9e:e9:85:60:3d:
         c2:6f:1e:3e:68:bc:6c:39:ae:35:f9:7d:4f:d1:eb:89:ef:70:
         7f:83:e4:b4:7b:bf:47:c5:c9:a0:da:48:39:ad:4a:11:03:0d:
         11:32:51:94:87:c9:24:54:13:35:ed:85:3c:ab:c5:33:41:9e:
         36:94:1a:ed:c8:89:68:86:f7:76:9f:b6:a6:86:81:f8:05:64:
         4a:29:14:55:5f:db:9e:2a:e6:cc:92:b3:b0:c9:b8:33:42:fd:
         af:80:73:49:03:92:ac:b2:00:e2:8c:b5:e6:2a:6a:87:2c:80:
         0a:53:90:60:4e:9d:cd:4e:f7:86:8f:de:d8:e7:b7:86:20:8d:
         ad:31:fd:78:e6:d8:db:2c:75:47:e8:18:bf:ab:f0:cd:6b:60:
         48:4b:f5:6a:b0:2f:57:73:b6:44:31:a5:c2:60:29:b9:36:25:
         48:c2:49:7a:4a:53:16:4d:be:ba:a3:27:ac:5b:b8:6d:e1:b4:
         14:a6:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----