Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
File:                     RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer (raw, json)
Hash identifier:          8xtO4LQrMeTV6/L4hXFvuhaPhfou4q3Iz+0w1exjS3o=
Subject key identifier:   44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6BCEA066D49BC954BF3608A89CD8C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12508
                          IP: 212.89.224.0/19
                          IP: 2a09:6c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:bc:ea:06:6d:49:bc:95:4b:f3:60:8a:89:cd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:ac:59:93:f3:c4:7f:d1:b7:b4:6a:e1:1b:
                    f6:fe:10:1b:66:cc:6e:e3:29:82:f2:be:05:9b:7d:
                    c1:28:8e:49:38:6d:87:4a:e3:96:1c:95:ec:57:8e:
                    e4:28:64:df:c8:9a:74:1f:cb:32:db:38:e0:58:1a:
                    33:47:e0:40:7c:56:73:e4:db:44:6b:2e:60:65:b5:
                    cc:c5:01:bb:cf:99:d1:2b:b7:59:85:d8:35:72:bb:
                    9a:45:e0:4b:88:d4:6e:7d:25:09:50:f1:be:63:aa:
                    49:2c:33:62:0f:ff:ed:d9:fd:39:84:9b:9a:87:06:
                    ce:fd:17:f3:8c:51:b8:a3:09:98:7d:ea:02:1c:4f:
                    30:73:b1:06:00:fc:ae:00:d5:90:b9:d7:19:b6:99:
                    64:17:31:45:d0:cb:fb:b6:de:e3:7e:5b:26:2c:4a:
                    d1:a5:e2:e4:f2:c0:4c:e9:d5:1f:31:23:88:1a:ec:
                    3b:ea:5c:d5:d7:11:1c:2a:fe:c8:92:25:f8:01:f2:
                    69:82:e5:89:63:a7:b2:f6:e8:b5:55:bd:31:b2:b7:
                    77:94:ef:6c:49:6c:e3:46:e6:95:2c:e6:14:a0:8c:
                    79:c3:55:32:2e:5c:8b:3d:6f:9f:37:2d:49:7a:ec:
                    d4:6a:1a:fc:dc:8b:81:b8:c6:ff:b5:c9:1d:7b:7b:
                    10:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.89.224.0/19
                IPv6:
                  2a09:6c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12508

    Signature Algorithm: sha256WithRSAEncryption
         9e:7c:91:cf:68:44:de:98:9a:a9:4a:52:50:d5:b0:3d:4b:89:
         59:fe:e7:6d:07:64:38:85:4c:bc:77:6d:29:1e:23:6b:0b:7f:
         cc:25:2d:a3:74:1f:c4:b8:69:f5:35:f0:7c:cd:85:c9:07:b1:
         d8:24:ab:c0:af:b1:16:eb:67:20:f5:dc:b3:c1:e1:ca:2f:0a:
         36:2e:db:70:6d:fd:ba:28:30:59:36:46:59:ed:7a:72:c6:fb:
         fc:17:db:ab:9b:ae:07:49:16:7f:b4:53:84:6b:37:9e:17:90:
         ed:65:76:d2:71:bf:44:6e:a3:a4:2d:73:38:fa:d4:7b:de:c1:
         d6:4f:9a:21:f6:eb:0f:16:3e:83:9a:13:78:ef:ef:51:a1:b8:
         43:f0:bf:3a:3f:43:b4:8b:1d:51:05:66:2d:50:36:a6:fc:5d:
         75:b5:b0:43:7d:01:31:c4:d0:21:35:a8:2a:5e:b0:d4:13:94:
         f1:fc:75:c4:97:11:29:d4:df:f2:21:55:95:12:3f:82:7d:d1:
         ce:e5:8a:d2:02:e3:d4:33:a3:37:bd:4a:5a:53:26:65:dd:79:
         90:36:03:e7:b1:f1:a7:5f:5d:1a:13:cd:b2:f6:db:73:9e:fc:
         ce:3e:30:65:95:26:d0:14:3b:7d:a8:b0:80:00:e7:a2:de:e2:
         b9:4f:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----