Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
File:                     YwITq6Hqkoue0ySR3puhBGSwY2w.cer (raw, json)
Hash identifier:          EF4MnEOZtz3Aj4xS6/UFDaqaiOoRee6KFi+/OuggIHM=
Subject key identifier:   63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B558F079AE79DF9D55ACA5DD1D5CAF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203136
                          IP: 185.143.176.0/22
                          IP: 2a0e:2700::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:58:f0:79:ae:79:df:9d:55:ac:a5:dd:1d:5c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:a6:2b:3d:ad:62:4f:bf:b6:80:10:2b:e2:
                    96:43:d2:dc:4e:be:3b:bb:45:51:0c:1f:30:c8:05:
                    d0:fd:6f:6b:36:ee:57:46:a3:e5:88:b0:5a:81:dc:
                    06:bd:13:32:18:c5:ea:72:89:08:c1:46:9e:46:9b:
                    5b:ba:d2:5f:3b:df:35:46:e6:d0:71:96:be:8f:31:
                    8f:00:2f:87:a8:ab:41:b2:0e:45:f2:b8:e4:a6:c8:
                    b6:ac:3e:16:45:ab:48:d8:14:42:b1:d8:3c:df:f4:
                    b4:1e:f4:02:70:7b:ca:de:85:c7:a9:39:d0:5f:5c:
                    37:96:b5:29:39:51:68:63:2f:ce:db:7e:f5:e4:61:
                    12:0c:e8:b4:e2:60:78:33:82:3d:44:5a:e4:0e:55:
                    e3:34:05:51:8e:96:38:44:bf:25:a5:d7:a9:80:a8:
                    9c:8e:66:48:bb:d4:8c:ab:8a:cd:11:41:74:c5:80:
                    fe:31:e3:a3:75:1d:56:73:f6:08:a9:80:91:7a:4c:
                    11:06:db:e8:10:0a:04:df:a5:2e:ab:29:95:66:71:
                    45:d5:b9:b6:bd:22:88:78:97:67:06:81:04:e8:15:
                    77:a9:f7:bc:ab:aa:83:61:5c:00:fe:e5:e3:ea:b0:
                    64:fb:92:42:78:26:07:6a:6a:ec:f0:5b:63:b1:2d:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.176.0/22
                IPv6:
                  2a0e:2700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203136

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:e0:5c:51:0d:e0:23:eb:fe:1d:59:dc:67:ea:11:d4:86:
         43:ba:0f:32:9d:ab:5d:75:e9:ca:91:15:ed:8f:74:53:13:97:
         bb:8f:89:71:63:15:8b:77:e4:3d:18:6b:48:e9:b2:4c:5a:d5:
         d4:08:1a:d5:e3:e0:01:c4:bf:43:ae:72:70:d2:fa:ef:2a:96:
         5c:63:39:ae:12:e4:ef:df:72:9b:9f:0f:3f:5c:cf:57:90:2d:
         c1:d1:5b:1f:3d:ba:f5:63:17:34:8f:fa:5b:69:3d:98:24:21:
         c3:8c:0f:68:61:04:5c:40:83:e1:62:f2:29:77:31:d4:cd:4d:
         a5:7e:84:6e:64:0a:17:31:06:2e:97:35:cb:20:a3:25:26:e3:
         34:d9:8d:94:03:1f:ed:2e:10:e7:36:a5:af:ac:55:61:19:ba:
         69:7a:1e:23:ba:20:5a:2d:7b:e5:c4:0b:cf:3b:61:61:46:6a:
         e9:0c:23:d1:46:74:36:13:02:f9:00:d5:7b:64:11:3c:7b:0e:
         82:b4:5c:d5:08:43:9e:0e:84:03:4e:db:f9:3d:ad:7f:60:7f:
         5e:02:df:e1:f2:06:93:03:08:45:7c:3e:8b:7e:ec:6f:07:b7:
         21:80:f7:f1:c2:00:20:bc:94:59:50:b7:3f:a4:18:ef:21:a0:
         e3:4d:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----