Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
File:                     SY_UU_XjX5x30dcG5WUTit-CJWo.cer (raw, json)
Hash identifier:          9TQZNS+ommQkX0O/nxql/slERppIiObD+L+/3ome9rY=
Subject key identifier:   49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428274AB54E412037166CD1ED74975722
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:54:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203931
                          IP: 217.29.240.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:27:4a:b5:4e:41:20:37:16:6c:d1:ed:74:97:57:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:54:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=498fd453f5e35f9c77d1d706e565138adf82256a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:55:0c:4a:12:82:f8:51:96:c0:52:1b:2f:
                    3b:4b:e7:66:99:13:e8:27:7b:08:a0:38:ab:b9:20:
                    e1:db:71:03:be:57:a9:e9:01:b9:a9:c3:dc:ec:ae:
                    03:46:69:34:a9:a3:cd:bc:89:04:31:fb:84:7b:a0:
                    5a:ab:f5:21:52:33:07:71:79:b4:db:9a:75:9b:58:
                    72:86:9d:53:0a:22:4c:3a:6b:29:c6:1a:23:9c:33:
                    df:0a:ce:10:a8:1b:92:2d:47:ce:88:59:54:0c:f2:
                    1e:cb:dd:0e:e0:e2:9d:94:6b:2e:2e:4a:f7:9b:fb:
                    50:49:a6:9d:eb:3f:4a:d9:d3:4e:6a:b9:63:53:9d:
                    a8:41:64:ff:e9:01:0a:91:ec:c8:07:2a:ca:63:be:
                    be:94:88:2c:6c:8f:0c:53:59:e2:23:a7:b6:15:19:
                    97:31:a3:17:36:ab:d8:9c:12:86:1e:e0:d9:7c:cb:
                    91:4a:93:57:35:42:00:e2:f9:38:99:0d:cf:d9:aa:
                    44:29:29:2b:88:a5:b9:9f:6f:26:bd:f9:34:75:2d:
                    57:ef:60:d1:e3:d9:b2:27:2f:06:60:31:59:ea:a8:
                    b2:6f:40:37:68:b7:8f:dc:f9:a9:f2:28:f5:28:5b:
                    ee:ff:f5:a2:43:10:0a:ab:dc:28:62:05:7f:76:d3:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.29.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203931

    Signature Algorithm: sha256WithRSAEncryption
         14:f7:aa:ef:3b:44:e2:58:d9:f1:1a:e6:b8:04:8d:3b:05:73:
         2a:ab:59:ee:3a:87:b1:7c:8a:6b:5f:56:c2:1a:3c:a2:1d:53:
         5c:59:99:c1:f3:39:fe:98:2a:ee:b3:51:16:bf:73:36:39:98:
         f6:a5:9e:8e:d4:56:1d:63:b1:25:02:03:05:df:f3:b9:c6:73:
         c0:bb:f4:6f:01:67:6b:ef:99:7f:f4:5a:69:26:fe:0f:d8:31:
         c2:d5:b4:3e:c6:96:df:b7:c7:ad:4b:58:aa:8e:fe:24:67:53:
         3c:a0:55:a9:d9:8a:2d:5a:e5:7e:9e:b8:8a:92:bf:f7:39:a8:
         8c:a5:3f:73:b2:77:78:7e:27:8a:17:dc:5a:df:1c:47:33:c3:
         5a:1a:2c:cd:b8:36:e2:ea:d1:11:aa:27:ba:7c:48:1d:e0:66:
         eb:e7:e3:3d:08:d4:5c:3b:c1:a2:65:7d:6d:49:e1:4c:1a:cf:
         06:7e:5b:b4:ad:dc:f3:0c:c3:0a:fc:71:04:6b:26:8f:4a:3d:
         b8:39:f0:0c:84:0a:5c:f5:7a:2e:db:30:ed:4e:6a:51:b0:af:
         36:c0:01:a6:6c:c2:b6:c3:60:e7:ef:d3:df:b0:3e:ee:3f:20:
         0a:0c:56:f0:89:45:2e:a5:84:9a:e3:5c:6e:d4:9e:22:09:6c:
         c9:1c:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----