Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
File:                     6yOl9H7GfpJakkkauZskujcRg_E.cer (raw, json)
Hash identifier:          vTkdk0EkooR2plS3lqoHcg4VNizqHhk9/07AsuG9ZtA=
Subject key identifier:   EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0196145A87BBE6E7F9345363360C0E2DCFC4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 08 Apr 2025 07:43:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210872
                          IP: 193.168.8.0/21
                          IP: 2a14:e480::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:5a:87:bb:e6:e7:f9:34:53:63:36:0c:0e:2d:cf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  8 07:43:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:26:8f:be:6b:ff:7b:34:22:c2:4f:55:7c:
                    ca:42:cf:c4:c8:64:72:e9:c7:7d:4e:84:24:8f:92:
                    43:37:1a:48:46:44:85:3d:1f:46:20:b6:44:66:12:
                    6e:d6:cc:6a:f8:ac:ba:6d:85:9a:44:7e:fb:4e:f2:
                    a9:96:e2:0e:b5:67:0a:7f:c0:96:33:fb:46:94:6e:
                    6e:fb:24:5c:86:02:78:7b:ba:8f:44:23:26:9c:99:
                    48:99:aa:d6:ba:e7:01:00:69:c2:48:b8:87:32:44:
                    24:ce:98:88:84:13:15:3a:31:f0:37:64:08:bc:a7:
                    49:62:fb:b9:7c:d1:25:ca:51:3b:3a:78:09:48:08:
                    13:a1:fd:4e:98:48:fc:c4:58:b8:d1:50:f1:2c:4c:
                    85:ec:a0:af:e9:e6:54:78:cd:5d:61:a0:ea:5b:6d:
                    65:ab:f5:a4:41:84:41:a0:86:32:e5:af:e3:9a:16:
                    b3:ca:bb:67:ac:51:f5:b3:f8:5e:8a:51:7d:38:50:
                    12:b6:f9:1a:e2:f9:f4:8e:61:81:6f:0e:7e:88:4f:
                    3b:bf:41:48:11:a8:94:08:8e:58:fb:8f:2a:e2:1b:
                    d5:13:4f:94:5a:88:aa:5c:e7:34:73:f5:a8:ba:9f:
                    f2:22:fe:c9:ef:dc:a9:e4:ed:7c:da:a8:ab:18:65:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.168.8.0/21
                IPv6:
                  2a14:e480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210872

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:ac:b4:4f:73:69:44:7d:fa:79:5e:2d:ee:bf:3a:18:37:
         16:c0:63:e7:fa:f8:9e:e3:56:05:4f:2e:d6:b9:d9:28:af:a3:
         62:df:90:54:c9:5e:52:4c:5b:9f:10:63:4e:05:74:1f:70:90:
         15:ad:c6:b7:21:45:60:56:50:31:2f:8e:72:97:a6:a3:72:a6:
         76:90:98:68:10:94:5a:13:56:8b:48:90:af:81:b1:55:b5:1f:
         42:46:95:8c:9b:1d:2f:37:be:a4:62:3b:0f:7c:5b:59:ef:9e:
         e0:79:32:dd:6f:d7:a0:14:ab:9e:38:85:b2:0e:e9:87:30:ca:
         b7:c8:79:05:64:0e:3b:26:67:13:ac:e5:93:07:85:fb:84:91:
         d8:59:1f:0d:aa:8d:b9:3f:33:ed:c6:70:24:a5:14:2e:32:6d:
         0d:d6:47:1e:4c:39:c1:04:78:10:1e:c8:8e:ad:f0:97:63:4f:
         e6:44:2e:4f:4c:12:86:ae:8f:dd:41:47:8e:0d:d6:51:8c:e3:
         89:9f:c7:36:dc:08:93:c1:02:d1:05:34:1e:a1:88:a8:08:80:
         d7:2d:58:e3:ab:23:8e:41:23:33:20:9c:c3:25:01:c8:f2:5a:
         55:1c:19:d7:5e:84:f6:16:55:22:b8:23:ad:09:5e:7e:c5:0c:
         9d:7f:37:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----