Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
File:                     AyUDQljydbfIfl9PcHBsDPWI78M.cer (raw, json)
Hash identifier:          O27eptsR2WMLjK5pYmwRO82JmICC7Hc3g/+hvozssaM=
Subject key identifier:   03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206811375E2B27AD68BF58B2D5366D38
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206706
                          AS: 215369
                          IP: 185.126.32.0/24
                          IP: 2a10:18c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:11:37:5e:2b:27:ad:68:bf:58:b2:d5:36:6d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:1d:cd:c1:ea:3a:c8:6c:31:a9:31:46:f8:
                    0b:5b:fb:80:0e:d9:ff:3d:27:dc:47:9a:c2:96:35:
                    6c:e2:f3:98:b1:1c:2c:ea:33:c3:7d:2d:eb:ed:de:
                    20:35:dc:37:2c:5e:45:08:e0:7d:d8:72:b5:2f:9d:
                    2e:12:72:46:54:1b:bc:98:f1:f2:49:ce:9b:77:fa:
                    e4:f6:36:a4:ca:b1:6d:02:f7:bb:de:49:17:29:5a:
                    cc:bd:ce:3f:c1:db:6e:83:a5:36:48:be:08:1f:76:
                    91:a8:41:05:19:99:24:06:29:f7:bb:92:d5:78:9b:
                    1e:f5:09:aa:c7:05:8c:5b:f5:9a:bc:42:04:5d:db:
                    7f:27:47:cc:f6:db:15:7b:55:e3:db:5c:ee:60:37:
                    62:6c:22:9b:6d:b8:62:cc:45:eb:94:8f:df:c9:0d:
                    ca:28:44:55:53:65:5d:de:ff:bf:3a:4b:19:57:c3:
                    d2:b1:d3:70:3e:1a:c4:86:1b:c5:0b:89:3a:6b:6c:
                    37:e7:b4:6e:f4:da:6c:aa:da:98:55:85:0a:83:91:
                    c7:00:7e:87:17:d6:07:ad:19:bb:e6:fd:ab:0f:76:
                    1d:2a:71:e6:4d:70:64:11:b9:9b:80:5a:a8:b3:c6:
                    48:99:96:fc:85:88:29:76:e7:5f:0a:1e:ca:07:32:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.32.0/24
                IPv6:
                  2a10:18c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206706
                  215369

    Signature Algorithm: sha256WithRSAEncryption
         68:74:95:9c:a5:5e:26:7c:3d:e0:3e:e5:ce:5c:e3:bb:e0:41:
         02:71:15:65:6e:8c:14:97:c9:e5:80:be:6d:95:e0:1d:fa:a5:
         0a:61:aa:e4:30:bb:b2:ad:89:51:d1:8d:e1:69:a4:ca:e1:31:
         f5:c0:29:23:73:8c:a3:8b:2a:fa:fd:5a:d2:8b:60:7f:e4:77:
         08:1a:98:96:2a:1c:52:11:e6:33:c0:84:37:11:31:81:45:11:
         2d:61:2a:15:a2:40:b3:a3:b1:51:2a:d8:bc:b7:04:a1:00:59:
         47:4f:b5:3d:b0:41:11:23:3e:b0:67:ee:bd:ad:a2:18:cd:04:
         1f:3f:e7:95:18:69:13:60:71:ec:19:74:5a:60:fe:fe:86:e1:
         f4:11:b5:e9:78:c8:d3:e9:9e:93:ae:be:f3:3e:94:8b:89:0d:
         c0:e9:8d:4a:c5:b9:ad:be:cd:8f:de:ca:ce:ce:8e:c6:b6:d5:
         1f:ee:6f:de:c8:cb:7d:6e:84:ba:f0:d8:5a:16:0a:47:f1:f5:
         41:9e:08:a3:45:19:28:a5:3a:80:f7:2b:e2:62:54:4d:66:cb:
         56:2e:17:d7:31:45:be:75:67:4e:60:80:2c:b7:0e:75:0d:b0:
         77:b0:a7:08:e4:5b:06:92:63:49:b9:c1:d7:29:51:d5:70:2a:
         e3:81:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----