Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
File:                     Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer (raw, json)
Hash identifier:          GdIQt3oprFfR26s9dCefqn8tqWnN+3sC4zczbqcBFyg=
Subject key identifier:   63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266AC5350C296DD867C3520B9E01CBE9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:48:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207721
                          IP: 109.197.165.0/24
                          IP: 2a12:fb40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:c5:35:0c:29:6d:d8:67:c3:52:0b:9e:01:cb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0b:74:e8:6e:80:be:e4:a5:e5:9a:53:70:12:
                    b8:4b:f7:f4:ae:15:78:37:de:7b:6a:a7:47:cc:d5:
                    c6:43:9d:14:bb:3a:d2:32:9b:ce:c0:2d:0c:d4:21:
                    68:0d:1a:bb:6d:1f:bd:de:7e:c7:99:7a:59:2d:86:
                    8f:9a:69:9a:67:8f:86:14:33:0e:8e:b2:18:8a:ea:
                    5c:13:61:03:da:c5:2c:32:d1:d0:ba:06:e6:9e:e1:
                    78:4b:8d:15:13:04:c0:e1:be:5e:0b:51:48:9a:79:
                    79:68:de:14:6d:2d:eb:fa:9d:f3:cc:88:69:9f:23:
                    3a:bd:9e:b3:e6:db:2b:a9:5c:94:b7:72:3d:81:0c:
                    d2:de:61:aa:e7:e8:b1:6a:7f:c3:38:31:fc:99:1e:
                    e3:16:2f:e8:cf:65:67:4f:cf:39:43:6c:aa:c6:51:
                    4e:14:81:4e:5a:b6:7f:61:34:ff:bb:ec:2d:66:f3:
                    70:9b:5a:ed:07:e7:77:42:ab:90:79:99:9a:39:de:
                    42:0e:c4:3b:3f:d8:5b:8f:21:e3:3f:64:b2:73:e9:
                    35:25:80:59:53:5f:cf:2f:e4:df:a1:c2:09:ba:9c:
                    10:18:20:3b:1a:d5:d3:0c:03:1b:99:db:c4:43:56:
                    ea:8a:c6:3a:46:fb:f3:74:f1:92:e4:9f:c6:3b:d4:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.197.165.0/24
                IPv6:
                  2a12:fb40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207721

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:4c:08:10:b8:f8:39:9a:7e:00:56:84:9a:40:51:2e:27:
         b8:fe:bc:5c:5b:67:ab:a0:d7:55:1c:12:0a:53:99:6a:9b:75:
         9e:b6:e1:ea:b0:33:b0:62:6d:25:ba:ca:ca:f7:76:75:16:17:
         d9:db:9d:98:fa:c3:b2:32:88:4e:59:c4:61:24:48:b6:61:4d:
         2c:b4:e7:a5:54:24:2b:ff:4b:d6:e5:b3:0d:17:23:d7:e3:ea:
         98:8b:44:df:26:a9:23:2d:bb:59:f9:3e:78:7f:48:ab:b3:d0:
         ab:b0:d7:38:42:13:49:4f:c8:4e:f0:32:b1:d6:bb:20:55:e6:
         02:44:f6:73:f7:3e:9c:03:b1:74:01:f4:07:ed:12:21:b3:13:
         29:20:ee:85:93:ae:20:34:74:19:a2:1a:5b:e3:a1:05:35:72:
         53:10:a5:fd:ce:ce:08:d5:58:25:1d:a4:98:75:ea:e8:1f:0e:
         35:20:af:98:84:68:79:25:a3:8f:da:ae:43:33:3f:0d:ac:71:
         48:8a:0a:2b:72:77:c0:e5:9c:2c:b6:2b:de:16:a1:d6:ec:85:
         0e:1b:38:65:02:dd:22:b3:fb:66:d4:25:91:19:ad:28:b9:91:
         4e:2f:d1:a0:81:b5:ac:a0:76:41:30:5b:5e:db:ce:f2:5a:83:
         4b:e8:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----