Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
File:                     YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer (raw, json)
Hash identifier:          FyAHTYA5ZtQ8rvQYDIpLVnqwVlcfB/fCZiHuOjvTmcQ=
Subject key identifier:   60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444BA18A729C7DB93F1422A01CBFB8B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216131
                          IP: 91.223.116.0/24
                          IP: 2a03:b600::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:ba:18:a7:29:c7:db:93:f1:42:2a:01:cb:fb:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=602d570b542e7302885d367418df802f99494f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:64:08:d1:59:24:e1:ec:f2:94:0d:f0:62:
                    75:54:e8:28:29:94:2b:7e:24:0a:41:57:48:ea:95:
                    90:67:af:3e:f3:83:45:92:7d:b4:ad:bc:8e:e3:b8:
                    45:02:46:08:0a:b5:5d:10:b5:31:5e:b8:41:5e:aa:
                    1f:d0:34:c1:b4:48:33:41:e2:5b:15:25:c2:89:fb:
                    b1:2b:48:33:8c:81:26:14:e4:96:72:7d:d5:20:f7:
                    94:61:39:3f:d9:f3:9d:57:d6:c9:2f:e6:e6:0c:21:
                    39:06:ec:ab:ac:fa:21:c4:90:05:4b:de:22:88:b5:
                    c1:aa:61:b2:62:0a:3c:f3:95:15:b8:37:c7:6c:34:
                    c2:18:ab:0a:01:6e:a4:4f:de:29:5f:f3:93:cb:b5:
                    88:31:1a:21:8b:7d:6a:da:e2:03:90:06:ac:3e:9f:
                    2e:7b:61:25:48:f1:f7:6b:83:b2:08:56:d7:0f:48:
                    68:29:f5:79:61:cf:d6:d4:bf:fb:41:a6:b4:c7:a3:
                    a4:72:c3:46:0b:c3:01:c4:bd:33:eb:d5:f0:dd:9c:
                    09:ff:f7:8f:92:42:9b:7a:a0:d2:c5:23:33:f6:b1:
                    28:79:68:e3:24:cf:c8:24:27:11:a9:8d:28:79:7c:
                    f2:27:68:5c:b0:e0:c2:67:92:4c:c8:9f:fc:61:20:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.116.0/24
                IPv6:
                  2a03:b600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216131

    Signature Algorithm: sha256WithRSAEncryption
         03:08:12:9f:fe:58:7b:40:78:31:63:3e:84:a5:68:c5:91:55:
         5e:6f:f4:78:b5:20:57:03:ad:01:10:0b:cd:e3:51:4b:0a:5f:
         5e:4f:ba:a2:39:b7:a2:62:6f:b1:86:e6:04:c9:ec:52:37:6e:
         b7:50:6a:14:c3:c6:f8:8a:73:31:20:1e:75:d5:67:be:99:94:
         84:39:47:c9:c1:e4:15:53:0d:af:3a:52:24:f8:4a:12:3a:97:
         97:37:95:f4:c0:ff:de:ef:e9:44:df:d0:2f:85:8b:fd:99:bc:
         27:52:2f:a9:d2:c6:e4:b1:6d:86:8b:21:ce:c6:8b:23:66:ce:
         ee:9c:32:28:44:3f:5f:9f:fc:cb:78:c9:a9:b1:f4:19:84:1e:
         ca:b8:14:ba:cb:99:af:8a:16:b0:57:a5:23:c0:71:73:43:56:
         9a:62:fe:b6:82:e6:01:50:c8:cb:73:7a:4f:39:49:60:12:7d:
         17:8c:3c:00:50:b1:79:80:1a:8c:5c:f6:68:f5:0c:1b:b1:94:
         48:64:06:f3:56:65:10:f1:f4:da:c0:fb:bd:e8:2d:87:5e:7f:
         1e:90:d0:71:52:ea:4c:4f:36:73:b8:1e:85:fc:eb:e1:a1:97:
         0a:d5:f8:1d:77:6d:a8:97:01:a5:13:ad:f9:81:56:28:4d:97:
         48:1a:b9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----