Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
File:                     SHYmY7ST8OpZ-v34R6AYuzipoYY.cer (raw, json)
Hash identifier:          zpcLR6/Y4qJ6vNGH7bskiA7xtPIfzMXZK5HPJmrKvwo=
Subject key identifier:   48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BC9AFB00383F9A578F7A169BD5A13
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207624
                          IP: 185.65.104.0/24
                          IP: 2a12:9a40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:c9:af:b0:03:83:f9:a5:78:f7:a1:69:bd:5a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48762663b493f0ea59fafdf847a018bb38a9a186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:a4:a4:e4:3a:97:45:3c:1a:f5:67:08:28:
                    0a:9b:3f:b6:8e:60:20:53:7a:45:16:cd:7a:b3:00:
                    6e:c4:fd:0f:fc:9f:62:4e:01:f2:12:6f:b7:34:87:
                    01:54:e7:bd:61:96:d1:57:6c:f8:2b:7e:7f:49:51:
                    b3:ac:dd:47:c5:09:c2:4c:2f:7e:2b:c4:09:eb:5b:
                    84:c7:a7:1d:28:45:d2:08:58:32:16:6d:5c:cc:0b:
                    93:4b:17:9b:fa:9d:f7:ea:70:0e:03:9b:31:dd:21:
                    a1:05:bf:7d:db:43:93:10:ac:1d:12:e7:a8:bd:67:
                    33:a7:05:d9:e4:ed:9b:6a:b0:d8:d6:54:08:ea:9d:
                    41:38:60:ae:58:82:18:6d:1b:3d:56:a9:ad:34:72:
                    be:28:b6:21:ac:56:c3:3c:8f:8b:06:76:77:d9:43:
                    a4:32:fa:64:d0:39:d9:1d:93:a1:ec:d7:37:f7:a4:
                    64:0c:ef:3a:6e:32:84:bd:d4:23:98:10:81:7b:4d:
                    f8:6a:ae:68:7d:ce:f4:17:23:17:17:2f:c2:b6:8b:
                    93:9d:66:b5:00:e1:7c:7f:cd:8b:72:26:bc:05:d1:
                    c2:61:6b:8a:b1:ad:fe:ab:22:e5:49:2a:4b:1b:30:
                    0e:17:aa:b0:15:e9:38:15:1c:14:fe:9a:1d:d3:90:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.65.104.0/24
                IPv6:
                  2a12:9a40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207624

    Signature Algorithm: sha256WithRSAEncryption
         68:b9:8f:61:fb:2d:82:7e:6c:93:8d:32:a8:fc:50:99:e5:63:
         a9:4d:27:94:9f:4f:50:1e:fa:2c:ac:4f:fe:28:b4:f7:97:68:
         d9:71:3c:bc:c7:bd:f5:f3:f4:42:4d:c6:a4:50:3f:34:1f:67:
         69:55:fa:6b:0b:e0:17:d4:18:c5:d2:be:79:91:14:21:9a:6e:
         79:bb:bd:0b:99:c4:12:90:c0:aa:8b:f5:e2:7b:3b:48:1a:3c:
         49:21:9e:e1:8d:b4:a7:32:97:66:4f:11:86:fe:31:83:1f:8c:
         ce:5c:68:0a:6f:2b:42:5f:b6:3a:ac:ba:1d:86:a1:94:76:6a:
         67:83:3b:ad:da:f3:0d:d0:db:f4:47:58:42:aa:bf:11:3f:1c:
         0f:72:5d:9f:02:57:8f:70:41:91:1c:74:8c:78:bc:d8:3b:3c:
         b9:91:5f:4b:c3:1f:12:da:f8:c6:eb:a9:d0:d9:e7:01:1e:68:
         45:88:3e:17:05:20:25:11:78:d6:9c:e9:82:5b:b5:bc:51:a7:
         1f:71:d5:2f:10:ff:b9:e5:fc:89:9f:36:ac:a4:26:1e:56:03:
         c8:a9:e7:e0:8d:9f:1f:b9:5c:71:8a:9e:6b:fa:6b:5d:ae:e7:
         83:8c:4c:1f:a5:38:a0:e5:35:b9:50:5f:74:2b:5d:15:7c:2b:
         46:1f:ef:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----