Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
File:                     WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer (raw, json)
Hash identifier:          v2+ZQRN4nOYf0lv/ax7Tmvj/xzRsy74yN24aEPz08ME=
Subject key identifier:   58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA14A40C0296133EA0266CBDA12831
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201274
                          IP: 185.79.12.0/22
                          IP: 2a05:6fc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:14:a4:0c:02:96:13:3e:a0:26:6c:bd:a1:28:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:2d:83:71:f2:b0:38:93:fc:14:bf:13:a6:
                    26:28:4e:92:d2:8e:ac:7e:0b:e5:9a:ea:4a:5d:cd:
                    4f:b2:95:8e:5d:02:0c:a2:bf:47:0e:ce:55:ff:3d:
                    b3:00:9c:62:8d:ea:cf:5a:2c:dc:c6:be:87:c2:44:
                    9b:fd:5a:9a:74:8b:30:32:02:54:ab:ff:90:56:a3:
                    64:05:3a:cf:a2:48:07:b8:51:d2:77:f3:51:7d:7f:
                    a3:b6:d0:ff:7a:23:b7:a7:01:97:7e:9b:3c:46:a1:
                    a2:41:b3:7a:5b:a5:4d:f6:e9:82:d1:45:28:3c:f2:
                    d2:c7:d4:38:98:04:a8:26:db:9f:5d:7b:95:aa:f1:
                    5a:c4:5a:b2:04:66:6a:a7:49:ef:c7:2a:7b:d9:4f:
                    60:0a:c1:9f:3c:59:27:80:5a:26:49:fa:a4:1c:d2:
                    50:7a:5f:b1:c4:71:b9:cf:60:10:eb:98:9a:d0:0d:
                    a6:29:c0:65:ef:b4:2b:00:0c:78:c9:ac:bb:1c:82:
                    01:ff:4f:c7:cd:9a:2d:c7:45:55:ee:b6:d2:1b:6a:
                    42:2a:b6:8d:da:0a:c4:2c:38:63:9e:70:da:de:92:
                    b2:00:65:c9:73:50:96:39:11:a2:97:be:71:c6:99:
                    f1:a8:91:5f:89:06:7d:29:f9:a1:c6:9f:8b:ce:61:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.12.0/22
                IPv6:
                  2a05:6fc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201274

    Signature Algorithm: sha256WithRSAEncryption
         98:6a:a0:d9:d5:fa:ef:20:70:ac:10:11:8b:07:5e:ef:f1:d7:
         f6:0b:3a:18:a1:3e:3a:43:a6:5f:42:8f:e2:bc:ac:10:02:75:
         c6:92:1f:4c:7b:cc:21:a7:d9:46:a7:dc:96:ab:32:88:98:3e:
         5a:07:7f:ca:ed:39:be:b8:ca:9e:6e:fd:cb:43:56:06:5e:90:
         12:7c:89:ce:ba:b9:f9:32:95:81:63:1d:3f:c9:77:db:c3:76:
         d8:28:31:18:8f:a4:6b:6d:65:06:91:05:3a:ef:62:73:7a:44:
         5d:00:f7:6b:93:77:89:3a:14:d9:67:27:4b:f4:a7:ed:00:72:
         b7:16:3e:ec:ac:15:74:92:bd:8b:ab:81:86:d2:0d:a6:e5:10:
         ad:d3:c2:37:cd:4b:9b:6d:8d:e8:73:ed:60:7e:9b:69:39:d7:
         68:3d:bf:95:b8:d0:9b:bd:ac:c9:4d:8a:5a:b6:d6:4a:7d:66:
         93:ba:56:31:69:55:f7:37:ad:98:8d:32:d0:23:88:f1:9a:ba:
         f0:a7:b9:cf:5b:ec:47:96:e4:22:5d:22:1c:a1:a7:18:56:6a:
         23:66:fe:f7:b7:25:f0:bb:e4:53:be:c2:bb:c5:57:79:e0:a4:
         c3:89:b1:3f:19:86:c2:21:25:80:80:28:00:68:6a:5f:05:ec:
         80:18:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----