Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
File:                     XcYkXKggiZ1-tBQDAsIQQbXbygY.cer (raw, json)
Hash identifier:          ynYQI/ui0Xt6sCRMW1OZAcITkiD7cudnCye3CFT8I3s=
Subject key identifier:   5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C46B8A5D7FA1B5593CA81C9B7DA29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 38984
                          IP: 185.23.228.0/22
                          IP: 188.65.232.0/21
                          IP: 195.135.236.0/22
                          IP: 2a03:7f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:46:b8:a5:d7:fa:1b:55:93:ca:81:c9:b7:da:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:9a:08:31:88:e8:a5:31:94:c2:d8:ed:d0:
                    7c:d6:f3:8e:d7:b2:e6:32:b9:72:ae:4c:69:e0:70:
                    65:5a:ed:ed:87:1e:c9:f6:10:89:8a:6a:f7:16:4b:
                    48:28:78:68:20:68:db:ac:17:fb:26:d3:35:b4:5b:
                    02:3c:a2:27:d8:0c:33:f4:07:64:1a:20:1a:f3:53:
                    78:3f:2f:4b:32:19:1f:57:f7:1b:39:3c:d5:de:34:
                    c7:90:59:7f:21:78:fd:2b:51:e3:a9:6c:bc:96:2d:
                    38:b4:0a:66:37:6c:68:6e:31:f9:51:fb:de:c5:66:
                    99:99:88:f1:0e:70:66:08:2d:e4:61:d8:b9:d5:81:
                    67:96:d5:6d:c3:79:bf:36:60:1a:47:6d:cb:a3:51:
                    5e:9e:a4:fb:f7:f0:44:c3:69:f5:e1:26:7e:fb:90:
                    39:54:de:be:bc:b9:a0:86:af:e0:0d:97:34:28:64:
                    69:55:d6:a3:60:2e:9f:dd:5f:0d:98:b3:01:4d:d1:
                    ec:83:86:a4:10:50:ec:c6:82:e1:69:f1:48:5b:6b:
                    84:cc:1e:0b:0f:45:81:fb:eb:3f:90:a5:ba:32:45:
                    94:37:19:71:43:6b:9b:0f:c5:d9:5d:17:57:ee:22:
                    8e:38:8d:e8:4e:37:83:26:0b:28:ab:74:98:fe:07:
                    d0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.228.0/22
                  188.65.232.0/21
                  195.135.236.0/22
                IPv6:
                  2a03:7f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38984

    Signature Algorithm: sha256WithRSAEncryption
         2f:01:f8:94:67:d1:7a:23:99:f9:2a:23:f4:fa:35:4a:3b:13:
         49:ca:9f:11:c9:e5:a8:46:6d:5e:87:03:dd:81:14:f0:c9:3a:
         da:8b:87:9b:15:37:5c:5a:f3:aa:fb:3d:7f:06:7b:79:bb:96:
         f0:97:6f:5e:95:cd:67:f9:b9:01:10:24:4c:72:4d:0f:62:f7:
         7a:20:c4:08:c4:b1:34:1d:68:09:f6:79:df:04:0e:a0:c7:b5:
         88:02:bd:ee:89:9c:cd:3d:54:b5:e2:3d:35:6a:72:74:a5:c5:
         ab:7c:af:4a:2c:70:6c:e3:8e:f1:c1:4f:17:cf:30:85:6e:14:
         0a:81:18:9f:7e:e7:e1:6a:61:12:51:0f:68:a3:26:aa:44:0e:
         25:37:5b:fb:c9:49:1c:ce:4a:66:e3:b7:ba:88:cb:de:c8:30:
         21:01:3e:5d:54:76:4d:2b:d3:28:33:ff:a7:37:9e:8b:20:a2:
         a2:c4:ba:28:36:dc:38:7a:1f:de:f8:1f:c2:ec:ce:b8:40:82:
         5a:82:e6:e7:b9:3e:91:d2:c2:08:57:bd:e8:e8:26:b3:6b:b9:
         66:7b:b9:1f:99:3b:e3:d1:66:83:c5:90:e7:74:70:76:f5:b6:
         6e:8a:8c:af:58:18:36:44:92:3b:f3:1c:79:91:33:df:db:b3:
         14:69:c0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----