Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
File:                     KYlkeFHvzRmJcu09FJzLvenFXAA.cer (raw, json)
Hash identifier:          lU97NzTb/g+ZQNVeoEEWaWZZ0jpjgylf6T1Rn/L4hcU=
Subject key identifier:   29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D638F79B6BEBE67C401111F4345021
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41993
                          IP: 185.82.144.0/22
                          IP: 2a05:9100::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:38:f7:9b:6b:eb:e6:7c:40:11:11:f4:34:50:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2989647851efcd198972ed3d149ccbbde9c55c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:df:de:7d:a0:f8:d4:71:00:ce:fa:d8:f7:
                    71:d9:f1:b3:1c:3e:42:a6:e9:6a:c9:c7:a5:c1:aa:
                    53:5d:26:8e:e1:09:9d:20:1f:b9:cd:75:a4:8c:9b:
                    37:e9:c9:39:d7:3f:cd:44:a6:35:18:21:ce:c3:b9:
                    ad:5c:2d:3c:e5:5a:b5:9d:df:a2:56:7a:1b:09:a4:
                    02:6c:0f:2b:98:2e:9d:60:93:ab:b3:ea:dc:a6:79:
                    d6:82:03:cd:96:71:98:c5:eb:85:b6:ad:36:f8:39:
                    d3:21:9a:0d:98:a2:1f:93:85:08:94:80:63:36:d0:
                    67:09:0f:a4:7a:71:8b:9f:dc:6b:8a:fe:aa:6f:0c:
                    95:ee:cc:73:d4:de:af:92:bd:ab:53:1e:12:22:2c:
                    4e:31:61:db:85:14:29:62:c3:69:37:7f:4b:6e:fb:
                    8a:2c:00:fe:af:3a:00:93:3a:29:e5:ef:0f:eb:fc:
                    96:b9:b7:63:6d:bb:4d:51:34:b0:f3:77:1f:df:72:
                    d9:6b:df:91:5f:a3:09:e0:c8:42:e0:f8:14:20:5a:
                    ae:b9:31:c4:0b:7f:b3:4b:0a:da:e4:2c:39:32:75:
                    b2:56:26:60:83:b8:28:e0:79:21:11:56:db:36:a7:
                    50:1c:93:f9:b5:85:7d:14:f0:b3:b2:fa:67:fd:45:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.144.0/22
                IPv6:
                  2a05:9100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41993

    Signature Algorithm: sha256WithRSAEncryption
         68:50:f0:f2:7f:e8:39:2c:68:6c:6f:0e:47:7f:4e:a4:85:d6:
         dc:fe:46:eb:b7:13:28:db:98:e4:3f:0f:35:ba:59:81:a2:b6:
         40:fe:42:07:c0:13:3b:dc:5c:1a:ee:57:87:f0:fe:b3:3e:e3:
         b0:1a:6e:0f:49:e3:46:16:e2:ac:8d:f4:b5:fb:ba:9c:e2:b8:
         62:24:e7:48:a9:c7:31:f6:0a:a4:36:15:5e:64:0c:46:ba:f0:
         46:14:13:ba:8f:8b:c1:ce:31:d0:14:d2:9f:f2:1c:74:46:88:
         dd:87:05:59:70:53:38:52:b1:aa:8f:a3:f3:9d:20:13:0e:d7:
         f2:96:dc:0a:8c:1f:e5:c2:29:1c:f2:37:63:23:60:a2:00:32:
         68:45:52:fa:ab:ab:63:b2:05:f4:7b:01:c9:ed:09:ce:1d:23:
         b7:aa:19:b1:04:08:db:59:87:0b:99:8d:65:4d:57:f9:53:24:
         5b:d6:87:7c:ac:c3:8d:8d:88:5d:82:42:34:42:87:89:a8:28:
         5f:9d:b6:79:d9:90:58:95:e8:bc:32:87:30:e8:eb:59:ee:bb:
         da:04:20:ec:95:3a:58:c4:c8:b0:69:11:c5:6b:ea:ad:96:59:
         4f:aa:76:a2:39:13:93:6b:75:d2:3d:dc:71:15:d7:ed:30:23:
         06:b6:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----