Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
File:                     0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer (raw, json)
Hash identifier:          GCXQM1KIZFRD84wFtRYYKz7nXWQf5HOrUshMNc4m3vQ=
Subject key identifier:   D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942748056BDDF0C1E79B65AF841CDCC7EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197350
                          IP: 46.60.0.0/20
                          IP: 46.60.32.0/19
                          IP: 2a00:8520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:05:6b:dd:f0:c1:e7:9b:65:af:84:1c:dc:c7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:d9:d9:84:85:49:ce:61:12:8e:f3:4b:13:
                    f7:5a:53:03:d4:69:07:a0:a9:9f:c2:06:f9:2e:b4:
                    f0:a4:2b:95:a2:ec:8e:11:de:6a:04:59:c0:7a:5e:
                    69:7f:86:d6:45:c1:60:3f:73:6d:fd:ef:f4:a7:13:
                    c9:25:a1:60:18:d9:c7:06:5a:85:bc:e6:0d:d3:cd:
                    0f:ab:a5:08:85:43:cd:24:8e:cc:99:38:cc:13:2f:
                    3e:be:11:35:8a:b7:50:70:ee:60:70:06:9f:ec:ca:
                    cd:f8:af:be:2a:39:80:2a:a8:00:bf:8a:04:49:3e:
                    09:ea:a8:8b:f7:f8:88:af:aa:6a:37:6e:15:18:04:
                    d1:84:dd:7f:96:d7:ba:ac:ef:6a:f5:c3:aa:3e:79:
                    ab:6b:b8:49:a8:0b:38:09:30:5a:a3:20:b4:2d:a8:
                    94:6f:25:7f:0a:d3:3a:0f:52:67:02:2b:f6:e8:d1:
                    0e:49:ff:2a:84:1c:cc:75:5d:16:5c:44:c6:c0:09:
                    a3:3e:22:fb:42:38:90:ac:d8:c3:e7:2d:17:9e:4b:
                    18:2d:1e:6e:29:76:ac:50:d7:fc:36:1b:eb:fb:68:
                    6b:2e:af:25:51:f5:1c:1f:3e:2a:be:ec:39:09:89:
                    cc:e7:f1:8b:79:51:01:a2:d4:47:01:eb:27:0b:c9:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.60.0.0/20
                  46.60.32.0/19
                IPv6:
                  2a00:8520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197350

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:2c:86:2e:a5:2b:3e:9c:44:de:0a:5d:4a:dd:46:0d:9f:
         f3:37:66:53:19:6e:0d:02:71:2a:32:e5:24:5c:fc:3c:20:1b:
         61:f4:06:24:ec:04:36:06:0c:cb:62:b1:f2:28:40:bf:6c:3c:
         11:cc:7d:45:2f:4b:de:55:c4:19:ba:bd:78:8b:d3:c4:b4:52:
         17:af:b5:79:05:41:00:6d:45:02:ca:95:67:21:51:98:d4:e3:
         bc:e3:5e:ed:76:c3:3b:34:76:10:a1:d8:1f:83:f5:e7:ad:9e:
         6f:b3:c4:a7:b5:8b:4b:3e:5f:78:e3:05:15:8a:8e:3b:57:64:
         1e:c2:a8:e6:43:a0:21:f4:0e:f3:30:4c:e9:6b:a5:5d:94:b1:
         9f:60:a5:29:c1:ca:97:0d:ce:ed:31:11:46:01:2e:9d:5c:e0:
         69:ed:63:31:b0:eb:42:85:72:2e:5f:e0:79:a9:70:38:1a:d6:
         31:a9:ad:48:df:b4:bd:02:6a:49:70:42:87:05:ff:ce:13:8b:
         6d:75:d7:7b:de:53:0a:68:96:58:96:3a:c7:25:4f:88:fc:3c:
         37:b6:a8:c6:0a:a2:36:72:6d:2e:e2:74:8b:ae:30:dc:a3:0e:
         b3:1f:9f:f5:ea:6e:64:73:c0:ee:a7:a9:70:c6:c4:54:d5:fa:
         c9:da:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----