Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
File:                     CByzM5E89BO7r9kneTezBhphgXw.cer (raw, json)
Hash identifier:          PgRlKpbKajuOCzwSukieM9OaRWG8e4IFQVLmdQJfoxM=
Subject key identifier:   08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC9222AD6145C7B8A6BA58D4F6E0A3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44939
                          IP: 193.142.196.0/22
                          IP: 2a0d:2740::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:92:22:ad:61:45:c7:b8:a6:ba:58:d4:f6:e0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=081cb333913cf413bbafd9277937b3061a61817c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:c8:b9:ea:ba:bb:89:d7:e8:d0:71:b1:70:
                    cc:53:b8:62:a6:7a:4b:82:12:ea:2a:74:86:10:90:
                    78:b9:58:21:64:c3:cc:75:b5:76:6f:79:69:b6:8d:
                    a1:4b:00:9f:67:ec:b7:8d:0d:43:5a:7a:53:92:6f:
                    ff:2d:5f:8a:fb:f4:c1:c7:3f:00:3e:c9:16:ba:8d:
                    f5:91:bd:76:68:c6:17:0f:1b:82:ef:26:dd:7e:cc:
                    2b:fd:84:60:fd:35:57:a9:47:27:40:b6:00:92:98:
                    50:b2:18:2f:ee:af:a0:8d:b2:bf:59:42:fb:fd:07:
                    bf:59:d9:7f:5c:1e:9b:ac:c0:d9:a7:d0:bf:a3:32:
                    c9:12:63:41:d8:9c:e0:8c:53:2d:6b:52:13:9a:fd:
                    27:66:f7:44:f0:26:98:02:c5:7a:a8:86:5e:c7:5d:
                    a0:be:c1:da:fd:b2:e6:72:7e:c6:7f:f3:64:86:3a:
                    c2:a2:e3:b0:7f:99:3a:2e:e9:ee:f0:d6:fb:93:bd:
                    4b:01:e1:48:eb:b7:13:ba:de:fd:48:11:14:62:48:
                    53:71:0a:f9:70:c7:d0:1c:ae:f5:fd:ec:b9:11:13:
                    6a:06:8a:7c:da:67:0e:ff:e1:15:68:aa:9d:ec:6b:
                    84:e0:78:6e:19:c6:45:a2:19:ba:70:5f:31:50:8e:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.196.0/22
                IPv6:
                  2a0d:2740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44939

    Signature Algorithm: sha256WithRSAEncryption
         7d:7c:9e:e0:8e:5b:59:3d:60:ed:e2:f7:d2:57:4a:02:a7:87:
         f3:a7:ab:38:85:85:7b:87:1c:38:d5:b8:ca:a9:f3:db:58:46:
         ca:7d:9a:47:d0:0c:44:8c:71:06:ea:67:4a:5d:49:55:a0:34:
         65:81:67:42:48:72:cf:e6:72:7e:8c:99:3e:bb:ff:45:3f:02:
         c2:11:5f:f0:e7:d7:cb:5f:44:dc:01:b1:3e:1c:73:05:72:11:
         e8:9b:bb:50:2a:99:c6:13:cf:70:43:16:64:9b:4d:34:87:48:
         c2:d5:54:04:79:dd:38:e6:bd:b1:0e:41:e8:a3:77:b2:50:c4:
         b8:20:42:78:2b:82:a1:15:33:6c:17:27:e4:96:79:c6:c4:24:
         81:94:c7:fd:98:91:b3:de:dd:35:35:51:17:a7:1b:08:62:9c:
         79:8e:c5:99:17:f7:6a:5d:6d:16:9d:83:11:d0:cb:ff:60:47:
         6c:1d:3b:80:08:e7:82:ef:58:86:b7:b4:3c:33:66:0b:04:91:
         f8:ae:8b:02:b2:f9:aa:ca:be:07:d8:cd:13:03:94:6b:41:10:
         28:55:64:01:f2:8f:26:58:e0:23:e8:bf:ca:50:fc:46:db:b0:
         12:e2:44:56:68:a9:05:65:18:f4:c2:f8:ea:33:44:01:44:49:
         b8:d1:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----