Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
File:                     20YNIBeVpqmS7UrBi7fFLBCLeFI.cer (raw, json)
Hash identifier:          53asTvSq9b+/rd28FHy91DehkNPv0bvmJsYyjdVAfdE=
Subject key identifier:   DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424456A8DE324F616EA2F7BE5B26CF715
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204870

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:6a:8d:e3:24:f6:16:ea:2f:7b:e5:b2:6c:f7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:31:0f:50:e8:07:42:09:10:ef:e0:98:50:
                    31:52:4d:ed:9c:a7:d8:c4:0e:90:9d:7d:6b:3e:c3:
                    ae:8f:26:1b:f9:d5:e0:a9:9f:07:9b:d9:1c:bf:6f:
                    e8:19:76:4d:57:ab:25:17:c6:49:c0:66:98:7c:a5:
                    e1:26:9c:dc:03:1b:ec:19:a0:0f:ed:a1:f5:fb:90:
                    a8:de:3b:1a:61:ba:c9:39:00:10:e7:10:a0:64:04:
                    f0:30:5a:da:e1:b5:c4:9e:21:84:76:1a:9c:c8:a4:
                    f7:57:9b:bf:19:30:8d:43:18:8a:93:8a:08:88:70:
                    cf:c0:d7:cd:52:5d:89:18:1c:fc:a4:02:9a:45:8b:
                    75:4c:c5:c2:dc:b2:63:ae:dc:c6:00:27:b3:ca:7c:
                    c6:47:b7:6d:22:c8:ca:9e:9c:0f:fd:23:38:9b:63:
                    38:84:19:47:68:b1:05:8e:82:77:8a:27:9c:6c:28:
                    98:6c:77:b2:73:ed:f9:66:18:28:75:94:11:10:f3:
                    66:6f:c3:22:8d:c8:75:bb:47:00:2f:0c:0e:a7:9b:
                    5a:49:88:77:c6:1b:70:15:3b:d3:a7:94:b4:27:7a:
                    eb:f9:29:ac:48:2a:e0:7a:c0:84:af:91:42:fc:69:
                    f8:7e:2d:07:da:3e:d1:2f:9f:c5:5f:49:44:2c:06:
                    5f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204870

    Signature Algorithm: sha256WithRSAEncryption
         b0:3b:7b:ef:1a:42:41:04:d2:a7:eb:0b:95:18:8d:06:d3:64:
         a7:12:a5:39:f9:75:8d:5f:82:ab:17:2c:30:02:c7:6e:8b:05:
         ad:15:4c:46:41:30:e6:89:dd:fa:30:91:dd:93:b5:f2:97:8d:
         a4:f2:74:3b:bd:81:40:29:16:90:db:cc:ba:9b:04:88:8b:ba:
         7e:22:29:82:c5:f4:8e:9e:ff:bf:cd:33:3c:49:99:2d:6d:50:
         8e:e8:d6:d6:e9:b9:eb:42:e1:f6:20:39:9d:96:65:ab:e2:45:
         fe:20:b8:7e:5e:3d:3b:5e:04:ed:d1:62:78:2f:cf:15:71:0a:
         64:67:cf:99:0c:b8:df:4e:b7:02:0d:fe:b8:af:0e:a4:1c:5a:
         78:a4:56:35:a2:48:32:87:78:74:1f:60:bd:14:0a:90:77:f0:
         2b:41:f2:40:8c:28:dc:a8:54:7a:08:53:83:5c:3c:28:e1:33:
         3f:4d:01:a5:2b:4f:77:26:d3:22:8b:88:00:a9:8d:6c:25:e5:
         78:f6:c2:49:55:63:f7:55:9b:9c:d0:c3:8c:90:b5:cf:64:72:
         8f:46:60:bd:3c:da:ed:9b:99:c1:1a:68:1a:d0:32:55:4f:4d:
         29:c7:a5:4d:5b:59:a8:69:45:fc:77:8d:db:aa:42:ac:59:4e:
         4c:52:6b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----