Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer (raw, json)
Hash identifier:          YJ1bIjrmsf+DcWFzZhMu0JPyvXk5FXvmA9H7cfFsj7A=
Subject key identifier:   44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B383C96963F7F6AFECB7F602A18A32
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208794
                          IP: 45.85.12.0/22
                          IP: 193.43.138.0/23
                          IP: 193.43.142.0/23
                          IP: 2a0e:b280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:83:c9:69:63:f7:f6:af:ec:b7:f6:02:a1:8a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:f8:ae:28:27:96:49:85:3b:e3:91:25:aa:
                    40:38:d0:5a:8c:29:1a:fd:d4:ef:77:b1:df:9c:f5:
                    5d:d5:da:64:e0:f5:75:d4:19:fa:a9:dd:37:b4:3b:
                    a9:78:44:b5:f0:ca:08:f2:03:2a:c4:de:a1:e5:ad:
                    da:76:15:42:f0:d2:58:2f:21:25:ef:05:cd:88:25:
                    16:06:fb:71:8b:4b:9a:41:36:75:d1:6d:f9:a2:93:
                    a2:d7:1e:13:89:ea:7f:ab:84:b0:cf:d9:5a:d3:c4:
                    45:a0:ef:65:60:89:ee:6c:2d:45:ff:47:81:0c:ba:
                    06:f0:6f:fb:30:18:50:0e:f5:de:74:66:4f:20:1a:
                    9f:54:9f:48:29:a7:6c:70:fd:b1:38:19:1a:9c:16:
                    22:b6:90:15:be:23:b7:d2:c2:01:a8:94:e7:90:35:
                    06:0c:ed:fe:d3:72:a7:5e:a7:62:92:ce:67:4a:b3:
                    b6:c5:40:e5:a9:be:5a:d6:5b:29:d7:26:44:bf:a6:
                    bf:9f:f7:1e:2e:17:65:6a:e6:2c:c7:ea:71:8c:fe:
                    ae:8a:0c:1a:cd:f5:f6:6f:93:a1:ad:18:e8:a0:89:
                    fb:62:d4:ec:a5:78:81:c9:38:20:73:a6:d5:98:f3:
                    3c:6c:ef:5a:ea:f2:5c:d6:d9:4f:13:c3:bf:d1:59:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.12.0/22
                  193.43.138.0/23
                  193.43.142.0/23
                IPv6:
                  2a0e:b280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208794

    Signature Algorithm: sha256WithRSAEncryption
         31:44:91:50:b8:80:26:82:8c:87:6b:8d:3a:94:01:43:fb:8e:
         28:c6:bb:bf:d2:ac:21:4a:cc:49:1b:9c:0d:76:5c:d6:04:d2:
         d7:10:c3:ae:a9:fd:53:ed:72:41:6b:73:3c:c9:2e:54:cd:51:
         98:fc:c0:05:5b:04:3d:c0:da:02:62:01:f1:11:73:45:16:d2:
         13:65:c3:1a:49:98:c4:86:1c:41:fa:48:fb:10:6d:54:42:70:
         1f:8c:eb:c8:e0:8c:0d:38:16:e3:42:b2:38:4b:67:00:b7:4e:
         f3:ab:21:07:aa:6a:d4:da:7d:8b:fa:73:3d:a4:96:3e:da:ec:
         ac:dd:c8:92:5a:59:2a:0c:49:33:89:b1:75:b2:08:44:33:cf:
         39:e1:e0:b8:0c:03:94:eb:27:6a:f2:ce:03:aa:40:e9:52:25:
         21:be:1f:a1:b2:42:08:5d:b9:71:98:c9:25:0f:79:5e:fc:69:
         3f:e4:63:17:03:ef:8a:66:08:37:67:f6:7d:d7:27:ac:7d:ab:
         03:3c:eb:db:72:3f:62:ce:65:5c:12:44:37:e4:56:0e:cd:32:
         5b:34:1c:7b:b8:e1:77:fe:0d:60:5d:00:9a:60:55:59:61:2a:
         09:97:15:47:2c:30:b1:3d:92:c1:41:13:da:00:fb:d7:9a:ab:
         87:28:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----