Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
File:                     YAG5U8a-H5GDHWilwBFcIODNf5o.cer (raw, json)
Hash identifier:          zjS/AcajgstQ7Um8JFerVVKay36WsslEoxXmkm4PKE8=
Subject key identifier:   60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3EA0B5112DE6E2B35C8C63047AFF2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42220
                          IP: 185.214.176.0/22
                          IP: 217.18.160.0/20
                          IP: 2a03:9520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:ea:0b:51:12:de:6e:2b:35:c8:c6:30:47:af:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:b8:fa:4e:83:74:96:0c:36:07:ce:55:28:
                    fb:b5:5f:86:4a:a1:99:54:1d:45:27:65:98:ef:42:
                    d7:ac:45:3b:3d:9e:5d:ce:af:e8:58:a6:c9:b6:f1:
                    f6:dc:6f:55:b0:df:2f:e7:c8:c7:08:30:5c:d1:e2:
                    ec:f5:80:2a:a6:da:96:5d:d6:6f:04:08:ad:88:89:
                    0d:fd:85:13:99:b1:2a:d6:02:20:03:c2:17:2a:cb:
                    ea:a2:8a:4b:88:28:6a:35:60:bc:6d:d6:d6:8b:83:
                    2f:9a:53:3a:6f:18:1f:17:78:14:3b:0a:7c:f6:d1:
                    e3:58:ef:76:5b:e8:27:b1:9b:65:bd:95:cb:be:1e:
                    bb:43:25:aa:2e:69:4b:fe:7a:df:a9:4f:fc:e9:9f:
                    27:5b:9e:d0:bb:34:4c:b1:66:d1:79:3d:71:18:5e:
                    20:16:2a:94:a7:e5:f0:c7:44:66:11:c3:5b:22:a2:
                    a7:c0:e5:00:f8:78:dc:11:ca:bf:55:e3:b4:33:f3:
                    de:81:32:fc:14:36:02:3b:dc:47:f6:10:ed:98:23:
                    06:54:5c:35:1d:99:49:78:54:f9:72:b7:67:b9:fa:
                    68:bc:70:b6:c5:fc:8f:95:c4:ce:5f:bd:69:dc:93:
                    58:d3:4e:64:a5:48:f1:24:5a:26:71:64:a2:17:1d:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.176.0/22
                  217.18.160.0/20
                IPv6:
                  2a03:9520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42220

    Signature Algorithm: sha256WithRSAEncryption
         9c:a3:3b:a9:50:bb:01:4a:6c:30:b5:95:39:9c:9f:ea:76:ff:
         7c:d0:d0:f6:ff:b2:8d:f4:08:49:ed:fe:4b:1b:e1:ef:1e:d6:
         41:5c:c3:28:41:29:36:cb:94:16:4e:dc:7d:dd:f6:66:12:de:
         6d:81:85:7a:4e:ec:7a:a8:44:9d:09:53:8f:1d:20:6e:51:ea:
         be:52:0d:f4:8f:fe:90:6a:fb:f8:21:f0:7c:83:a7:6a:38:76:
         8d:e6:65:af:c4:2d:0a:7a:ce:5c:62:64:2d:e1:c9:21:2b:fb:
         fe:b7:67:df:71:14:66:50:24:47:a8:37:78:87:04:15:9b:81:
         a5:e0:2c:3c:ff:4b:01:72:a7:92:46:6d:51:06:03:60:35:db:
         05:c0:68:aa:92:f9:40:1f:e7:b4:4a:a8:cb:4f:34:20:ae:da:
         77:bc:60:46:f6:a2:6c:4c:eb:a2:00:cf:7e:73:39:0b:07:08:
         80:f6:48:6a:9e:3d:44:0a:3b:92:a2:b6:cf:72:fb:61:25:c6:
         d3:34:7b:b7:ed:a5:75:19:0f:7b:74:3f:92:bd:49:e1:fb:9d:
         1a:d0:b3:02:a5:68:6d:c4:08:a3:15:03:19:19:48:3f:57:c9:
         78:06:0c:2b:50:ca:be:f3:3e:a1:91:74:fa:4f:5d:1c:62:c0:
         c6:13:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----