Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
File:                     Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer (raw, json)
Hash identifier:          zjAvSEnN73PpoZXfXg7RufQSkUTE0eAnyIxq0NAytdQ=
Subject key identifier:   62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C2138D481EB1400E34E6C71CFA2BD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205345
                          IP: 185.221.124.0/22
                          IP: 2a0d:c000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:21:38:d4:81:eb:14:00:e3:4e:6c:71:cf:a2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:3e:67:14:bd:28:c4:24:03:7e:9b:c8:01:
                    7d:ae:05:d0:2b:e8:6d:08:dc:74:b6:30:5a:3c:ae:
                    4e:c0:3b:11:9e:5a:bb:6e:4e:8d:98:4f:32:92:96:
                    6b:c8:e3:29:ba:63:98:41:b9:ce:84:de:1a:e9:06:
                    5a:58:7e:cd:98:a6:82:3c:b4:d3:44:d5:04:1a:e1:
                    ec:e1:d1:18:4e:f9:88:92:c1:21:01:af:8a:f3:b0:
                    e8:63:82:ee:8e:62:c0:ea:2f:a1:66:a1:22:4c:ef:
                    1d:0c:c9:00:63:ba:06:af:76:29:7a:3a:eb:f9:00:
                    89:2d:9d:b4:b2:6c:ab:a1:08:05:7e:59:36:5f:c0:
                    b4:66:15:bd:42:58:db:a3:23:44:eb:d8:2d:a9:2e:
                    de:42:9c:a2:59:3b:f7:61:e1:ea:57:74:72:99:df:
                    42:c2:ef:c1:a0:2b:2e:9a:b1:4a:a5:d4:dd:29:c9:
                    72:d1:15:82:c7:90:db:ae:25:37:53:c8:14:0a:a6:
                    83:98:51:ab:e1:d7:25:34:21:9b:52:46:55:12:e3:
                    db:31:3b:68:16:6f:0c:b9:67:aa:b2:39:3f:51:ab:
                    d8:11:bd:eb:34:a6:09:38:42:c4:27:18:79:59:53:
                    f2:3c:50:f6:36:e9:30:da:5b:19:d3:e9:9f:79:f0:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.124.0/22
                IPv6:
                  2a0d:c000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205345

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:98:a2:0f:01:e7:12:25:b6:77:69:32:24:48:b5:54:dc:
         16:a3:a1:78:93:80:1a:5f:d4:fa:a9:8e:33:6e:d1:40:b5:cd:
         66:38:ea:92:cd:4c:3f:95:d0:ca:9f:79:f5:01:51:46:27:0c:
         a8:bf:7a:29:e5:38:a7:b5:5c:fe:12:8c:cc:bc:d6:e8:b5:a1:
         2b:34:19:1c:71:19:0a:ff:9d:ab:ad:18:ad:e2:91:0d:8e:16:
         44:df:ea:b9:c8:63:21:25:ad:84:8d:8d:eb:c2:eb:23:3d:eb:
         c8:be:f8:2d:d9:f0:24:ce:aa:bb:3f:15:45:e0:42:dd:c3:79:
         ab:e7:b3:83:d3:b3:9f:28:2d:53:8a:9b:d9:cc:00:e4:09:2f:
         0a:ff:34:82:dc:da:42:19:13:67:72:f1:39:cc:64:83:4a:70:
         7f:aa:04:5d:f1:9f:1f:1c:a6:6e:49:50:b3:fe:ef:23:1c:8e:
         08:8f:fc:a7:c3:e3:a2:c9:81:42:4a:3b:7f:bb:fe:46:6d:1f:
         2e:38:59:19:9f:49:6d:e6:bd:71:4c:79:83:b0:1d:84:2c:72:
         db:ce:79:83:4a:43:9b:50:71:d4:3b:98:bc:75:73:a8:e5:a9:
         ef:5d:a3:d9:a7:0a:67:8f:c2:4e:b9:88:51:70:d8:79:5b:1b:
         8e:a3:99:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----