Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
File:                     RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer (raw, json)
Hash identifier:          wXYKkOb0dg25fBZOZ5mpepG4KcZqZRejZkklV/euni8=
Subject key identifier:   44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194244483452594A1684746CDFCFFDB4AE8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51758
                          IP: 95.215.184.0/21
                          IP: 185.206.232.0/22
                          IP: 2a00:51c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:83:45:25:94:a1:68:47:46:cd:fc:ff:db:4a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=448ca39537597cfae60ae0421db8e098b4e26130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:f8:c3:84:3e:a3:74:9b:db:14:3d:40:31:
                    4a:c7:a1:be:10:8f:89:dd:92:11:b3:87:42:ad:d3:
                    bd:2e:0f:21:aa:d1:3b:c6:96:90:3d:f1:92:bd:0a:
                    20:84:27:b0:c6:86:ca:b7:87:2a:1f:02:f5:0b:0d:
                    0c:c1:01:88:f4:a5:12:b9:0f:e1:ac:5f:7a:2f:77:
                    83:f0:00:5f:53:b7:4c:5e:31:27:c9:81:d9:7a:1e:
                    7e:ab:34:74:d7:b9:5a:c6:f7:82:c9:a9:08:04:0b:
                    8a:31:e8:09:00:9a:cd:8e:96:be:58:d5:cf:bd:d3:
                    53:a0:cb:2a:ba:98:1c:07:bd:36:1c:e5:9f:ab:55:
                    f0:14:00:82:c9:b2:e0:71:44:33:ff:4f:cb:25:a6:
                    c3:53:0b:71:8c:8c:45:25:c1:7a:f8:03:76:42:21:
                    43:68:f3:df:a2:1f:84:e2:b0:77:f8:78:04:82:f6:
                    56:a9:d3:c4:a0:c7:f9:3d:8f:f5:26:97:8a:3e:99:
                    a3:81:54:25:64:1e:c8:7c:35:88:6f:c4:1f:f5:4f:
                    2c:43:3a:49:aa:e7:f5:ff:1f:9a:98:75:04:aa:06:
                    10:a4:b3:6d:17:2a:55:a8:f0:d1:0f:56:6c:0a:66:
                    ad:20:63:09:d7:70:da:ad:b1:f4:ef:18:63:00:e6:
                    96:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.215.184.0/21
                  185.206.232.0/22
                IPv6:
                  2a00:51c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51758

    Signature Algorithm: sha256WithRSAEncryption
         a8:ef:f7:31:7e:55:a5:49:a9:3f:be:bc:12:dc:a0:71:11:d2:
         f9:0c:12:66:e1:25:74:8d:2a:b2:4d:4c:d4:c4:19:1e:69:79:
         68:65:29:d0:59:19:a8:cc:a4:a6:2c:ca:00:6e:8f:e3:26:77:
         8e:0c:1a:51:31:aa:3b:ef:4e:f4:55:da:59:d8:94:32:f2:99:
         61:bd:fd:79:a4:34:b2:7b:9f:87:e5:ef:13:dc:58:62:4f:8c:
         a8:e9:8c:7c:49:c9:c2:99:fd:9b:8d:83:77:0b:22:07:7d:3f:
         f6:90:ec:a9:12:26:e6:e9:df:10:10:8f:d9:f8:38:f9:bf:4f:
         8a:de:7b:9e:76:ff:de:34:b9:3a:8f:00:dd:3b:a1:22:d8:a6:
         36:58:b2:ee:69:c1:66:36:b7:27:d8:f3:2d:92:45:32:79:70:
         4e:81:4e:06:8b:d3:2b:13:5b:a3:7d:8b:cc:7d:78:2d:db:b6:
         6b:6b:e9:e9:0d:28:63:09:41:75:d5:d1:19:e7:4a:54:04:ed:
         a3:1f:bc:6a:65:73:b8:5e:44:7c:c7:ad:1c:8a:f1:6f:3a:7a:
         fa:6a:26:99:96:85:dd:41:4e:c8:f9:5b:ea:17:d5:61:ea:39:
         dc:9b:21:b5:30:d3:1c:96:85:ea:c4:66:19:7a:01:bf:57:0a:
         9f:75:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----