Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
File:                     YOiP_m8N5fLx_J0U72LyVnC9W0o.cer (raw, json)
Hash identifier:          yq2ERRukJChS4Y0XJR9kaxA+2js1+COkvtrqup7m83o=
Subject key identifier:   60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB7175D2AF51B8A5A1D48DA3415254
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 52152
                          IP: 195.54.190.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:71:75:d2:af:51:b8:a5:a1:d4:8d:a3:41:52:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:eb:5b:28:70:9a:85:79:6e:41:8d:58:17:
                    f8:4a:ca:83:48:39:61:51:0d:3a:99:54:96:a6:00:
                    47:5e:20:ff:fc:14:a7:65:c7:41:d4:7e:a3:4f:b2:
                    ca:83:37:83:cf:88:0e:d7:03:93:09:8f:fb:e8:c7:
                    d9:75:d6:7c:1f:44:ea:2a:fa:86:71:d3:18:c3:47:
                    ab:47:37:57:ce:2a:66:62:da:a9:3e:f9:6f:e4:c2:
                    c8:f5:c4:b2:3b:e1:11:e1:4a:4e:fe:34:6b:ae:48:
                    1f:f8:ec:a2:2f:26:3b:40:e4:6f:50:c7:b9:f7:41:
                    f7:0f:a2:7e:38:ad:6c:91:b8:5f:80:94:36:d1:30:
                    8f:0c:2d:85:07:8b:04:7c:94:91:0c:b2:dc:52:d8:
                    25:fc:5a:83:af:8a:d4:f0:81:34:1f:ca:c4:45:2a:
                    56:f8:ff:9f:c2:0f:90:42:ec:15:f6:57:56:05:57:
                    97:25:ba:c7:86:21:d6:7a:c2:6a:d7:b6:f5:41:17:
                    a9:73:c2:24:3a:31:7c:f1:9a:58:48:03:14:5c:85:
                    83:35:c3:13:49:21:8b:99:c7:c9:51:c6:f2:37:8c:
                    b0:5b:a6:56:4a:95:93:98:de:0b:1c:f0:3c:73:ad:
                    09:35:fe:d7:87:e2:34:f4:9e:bc:8b:3a:87:9a:29:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.54.190.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52152

    Signature Algorithm: sha256WithRSAEncryption
         81:69:b5:bd:eb:86:f8:2a:95:b6:78:f2:68:d7:9e:2e:5f:83:
         4f:87:97:a4:52:c7:e7:72:09:81:d0:9f:12:07:11:c9:e8:4d:
         88:99:e0:16:3c:ea:9b:d4:47:75:a3:ac:fc:6b:0a:41:3e:a0:
         d8:6f:b1:7a:c4:20:8b:ab:5a:fb:40:60:b3:f4:20:f4:ab:27:
         13:75:c3:eb:51:47:8a:bc:88:18:6a:6f:36:e1:14:c6:0a:51:
         d7:76:29:cb:c0:ff:4e:73:5b:aa:66:a9:01:77:9c:bc:c5:e4:
         a5:1f:62:e4:17:37:a5:98:b7:c8:68:5d:a9:a4:34:ef:f0:0a:
         78:4c:b4:15:5a:f3:9e:12:92:9f:49:00:37:cd:38:be:4b:6e:
         72:4d:b6:c6:9b:8d:6f:67:e6:a7:a4:6b:dd:2c:7e:61:6e:56:
         e8:69:85:0d:4c:8e:fa:ba:fc:37:6b:a3:46:f2:69:dd:9e:70:
         87:6b:c6:3f:e8:76:42:4e:1b:01:1d:09:f7:90:8d:d1:90:f2:
         71:39:81:bb:46:fd:77:e3:d2:8c:5f:f8:f2:e4:87:af:9a:ca:
         17:16:a8:e4:5b:e4:6d:35:eb:07:4e:2c:84:9f:1a:69:62:24:
         4c:86:98:59:10:d8:91:86:e4:2e:67:10:4f:3c:e6:0a:6e:5e:
         f0:49:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----