Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
File:                     Hay9x9yHS9i-Izb1Znzfd72YDHc.cer (raw, json)
Hash identifier:          IGvGIoJsC5df03lSNu/P78WSMH8CpjLaCqG46ds1rqg=
Subject key identifier:   1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA392EA4C50B7D1A1193DBA3EA79AC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199749
                          IP: 84.39.32.0/19
                          IP: 185.47.80.0/22
                          IP: 2a01:8920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:39:2e:a4:c5:0b:7d:1a:11:93:db:a3:ea:79:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:56:30:06:d0:9a:5b:9b:fb:39:58:7d:80:
                    6d:1b:a1:ab:f9:28:11:13:f9:9e:c8:d1:64:1d:86:
                    67:02:fc:76:d7:89:3b:83:e7:9d:26:f3:96:12:1d:
                    72:55:01:76:22:40:ce:39:46:2e:d7:82:bd:40:e3:
                    c2:48:e2:63:a2:62:c8:de:ea:58:22:c9:f2:1e:ab:
                    28:4b:f9:db:04:00:35:b7:6a:0c:c3:13:5a:06:3c:
                    54:3f:d5:e4:b0:af:fa:f1:83:55:0a:37:8b:f7:1d:
                    ff:2d:fe:6f:29:46:91:01:34:5b:a0:22:7a:1a:fb:
                    ce:fd:4d:97:f5:e5:48:bf:2c:71:3c:41:ee:95:cf:
                    09:85:7c:76:25:9b:64:07:58:b8:66:15:ab:75:be:
                    31:1e:c3:1a:99:14:f5:c3:3a:86:ce:4b:32:01:50:
                    12:1a:a3:18:a9:39:d8:6f:b9:21:36:cf:1d:62:16:
                    42:c0:2b:36:d5:eb:fe:6f:45:15:54:f0:14:36:f1:
                    c3:55:e8:75:d0:f9:9e:2a:f5:e1:a5:0b:93:1c:1b:
                    4d:06:a3:26:60:96:87:63:97:0b:ed:31:09:b9:63:
                    df:f0:29:e9:16:2f:3e:47:f9:70:74:68:98:37:3d:
                    88:da:6d:d3:d6:d8:49:c5:80:e6:d1:e5:bf:df:90:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.39.32.0/19
                  185.47.80.0/22
                IPv6:
                  2a01:8920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199749

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:09:3c:c9:dc:a0:f8:c6:78:e3:b9:7f:e5:3a:9b:ac:a2:
         4b:85:9a:68:34:7a:5a:f9:18:48:c9:ee:51:3d:92:b7:d1:35:
         36:ed:d1:61:a1:11:60:11:5d:1c:f0:3c:89:fe:c7:a3:5c:fc:
         9e:0b:dc:16:2a:e2:09:87:19:25:b3:5a:c3:e1:bc:cb:e6:7f:
         78:17:45:ec:09:fd:48:88:e3:5e:59:f7:de:00:8a:78:05:53:
         2e:5c:17:6e:49:d2:c7:bb:09:1f:89:78:c5:68:c2:fb:8e:b9:
         36:02:17:cc:2d:87:9e:52:ac:9c:8f:f7:4b:b3:a8:f3:0d:fe:
         f1:15:a8:bb:d5:8b:7c:00:35:26:ea:75:c3:4b:9e:0c:55:e6:
         58:d2:2a:16:36:fb:e7:da:34:b0:42:21:ad:14:98:3c:3b:88:
         a8:f3:91:70:b1:1f:a8:ce:12:4d:87:e6:01:9f:31:46:2e:f4:
         5c:51:c6:a9:7b:83:e2:fe:25:98:ca:9e:fb:a0:8d:c7:17:36:
         ae:47:c0:e4:3f:a0:ad:80:11:87:d5:60:1c:24:e0:2e:61:26:
         d3:12:17:73:65:c3:8e:9c:e8:bf:95:76:d8:01:cc:cb:de:c3:
         6e:7a:a1:c5:db:c6:10:01:74:76:63:29:32:65:5f:d1:24:c4:
         19:35:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----