Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
File:                     Iyrza5wHnaCRgn2j0HycilI2y1Q.cer (raw, json)
Hash identifier:          nungiK6qknZ78YMHTuy2I1fGgvS8PRiawGIY+fLjlEQ=
Subject key identifier:   23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942369FD5F950138CA252BD98BE2272A89
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200984
                          IP: 185.89.180.0/22
                          IP: 2a05:da00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:fd:5f:95:01:38:ca:25:2b:d9:8b:e2:27:2a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=232af36b9c079da091827da3d07c9c8a5236cb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:5b:a7:c0:9b:e9:ad:41:03:e2:8e:32:c7:
                    5d:75:3b:f5:63:78:3e:28:7f:d8:28:42:31:79:2b:
                    dc:bb:9e:6f:d4:56:35:44:82:8e:b9:96:38:3a:2c:
                    60:95:ee:ef:2c:ac:b9:d4:b8:61:fd:c2:cd:d5:52:
                    41:08:c4:e0:65:af:86:79:1e:c3:12:62:6a:a3:48:
                    e4:91:da:99:c6:25:b1:89:06:f2:b9:64:ac:04:34:
                    6f:77:58:15:43:be:71:7e:33:14:5c:25:4e:0e:3c:
                    bd:2a:69:f1:86:d0:8a:2b:b1:91:d6:e6:d7:2e:8c:
                    3c:ab:d9:17:03:7e:5f:3c:fc:84:bd:b1:28:7f:53:
                    fd:72:33:4b:89:10:da:08:ba:af:b2:23:4c:29:77:
                    18:70:10:95:24:5a:26:18:0b:60:1e:28:96:f9:df:
                    6b:36:0a:9b:45:5e:94:a2:ab:44:93:71:c2:64:8c:
                    7d:b1:42:cd:d1:ae:b9:99:6e:a5:7e:02:d6:72:0d:
                    f0:54:c0:45:6e:5f:be:37:5f:51:3c:8c:b4:b4:15:
                    c0:60:0e:86:7b:31:29:b9:7a:33:21:38:c5:4d:4c:
                    71:72:08:b5:a3:3e:5f:03:b1:39:52:d1:0b:3f:5a:
                    29:04:df:35:f5:e4:f2:8b:6f:bb:67:64:05:a8:ba:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.180.0/22
                IPv6:
                  2a05:da00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200984

    Signature Algorithm: sha256WithRSAEncryption
         86:bd:f4:23:6e:0c:cf:7c:32:d4:18:23:96:0b:17:df:17:42:
         0f:48:f7:88:7d:27:57:8b:f6:9c:19:d8:e2:a8:f0:f5:3e:2a:
         9c:10:ab:25:23:b4:d9:bf:64:da:58:f8:78:b2:68:41:eb:83:
         f1:be:5f:0c:f5:5a:4f:04:02:93:90:f3:74:9f:3e:7d:af:ff:
         98:30:af:f5:16:c4:36:9f:c0:b8:b6:67:0b:b0:c9:e6:1d:d7:
         4a:3e:6d:aa:b5:a1:ab:48:0f:29:14:d1:f8:f9:6d:91:12:d9:
         c8:1c:76:69:70:5b:52:07:83:70:c1:9f:4d:de:d5:2c:61:bf:
         98:86:b9:c4:e2:1f:54:ac:ec:a8:6e:f8:28:a1:39:7a:4c:ca:
         12:65:84:36:dc:ea:f9:e6:50:f8:18:5f:d0:ec:b1:da:7a:50:
         95:ae:7b:e4:4f:71:16:ca:9f:8a:92:d4:16:9b:86:65:10:7d:
         02:53:76:8f:53:e8:29:c9:87:fb:9f:49:6c:fe:62:f4:da:84:
         a1:b1:b3:20:48:e1:b3:3d:ae:62:a0:a7:1f:1e:a3:47:68:94:
         ba:05:8f:85:1e:77:90:79:87:35:f1:7f:42:c0:32:07:92:f7:
         bd:fd:3b:e1:50:89:f5:43:b4:6a:53:9e:2e:bd:fe:d1:a1:f7:
         5b:aa:a7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----