Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
File:                     ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer (raw, json)
Hash identifier:          LwLY/pKnFDg01rfGEuRQuYTbSJDK9gFQctvl+rwpKHg=
Subject key identifier:   65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A26A0A9D187D96225FFC3E6F8A9D4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205147
                          AS: 209525
                          IP: 185.8.96.0/22
                          IP: 194.147.248.0/24
                          IP: 2a10:1940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:26:a0:a9:d1:87:d9:62:25:ff:c3:e6:f8:a9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:04:93:81:8f:d6:90:9a:6c:ee:f9:f4:30:
                    f6:a9:c6:03:69:a1:72:ed:5b:ea:97:0d:95:31:72:
                    d2:2f:ec:c4:a9:c0:28:5e:1d:28:79:7c:9c:87:35:
                    d4:ed:2c:27:d6:9c:f2:73:57:cb:53:26:23:5a:9e:
                    28:e5:b5:20:87:77:af:aa:38:d3:9a:a7:f0:bb:2d:
                    77:02:da:ae:2e:ea:c1:d4:f8:e5:26:9f:b6:a0:5c:
                    43:9d:94:1a:b2:58:35:03:f9:2d:f4:e7:fe:5f:4b:
                    d9:2a:c9:6c:6c:54:9b:0b:40:5e:6f:a4:4a:0f:a3:
                    5c:c2:f8:40:82:0f:13:98:97:63:50:15:af:3a:1a:
                    9a:c2:42:6e:e6:9f:8f:72:65:8c:ab:d0:4e:e0:01:
                    c6:06:40:7f:b5:9c:33:09:4f:39:6b:77:26:da:18:
                    47:41:0b:f1:52:b4:e9:0c:32:27:ac:f6:30:d1:f5:
                    b8:32:b0:b9:b3:e7:3d:04:fa:50:30:8f:be:aa:9e:
                    0b:06:0e:96:7e:34:01:06:f7:a5:c9:84:cb:3c:fb:
                    e1:ad:5f:78:80:63:d0:46:80:b2:55:5f:88:ca:97:
                    61:44:46:ed:c8:04:be:57:01:42:ab:66:48:b9:f5:
                    96:fb:02:3c:55:72:77:68:c2:d2:59:f8:f9:82:30:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.8.96.0/22
                  194.147.248.0/24
                IPv6:
                  2a10:1940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205147
                  209525

    Signature Algorithm: sha256WithRSAEncryption
         06:15:28:46:22:c2:f0:30:d6:bf:e0:4e:dc:93:5a:49:76:1e:
         91:8f:0b:ea:c9:b7:15:26:be:70:68:13:f6:43:c6:c1:71:ce:
         30:e1:bc:7a:b9:af:b5:7f:d5:cc:03:3b:6a:b9:7d:c5:3b:63:
         e7:39:81:31:21:b5:ea:6a:64:2d:30:b9:26:6f:db:d0:35:79:
         f2:2a:ae:c8:06:34:f2:67:99:c3:27:24:9d:b4:ef:47:0e:a8:
         1d:0e:7b:d1:19:40:38:39:b3:92:f3:9f:0f:b6:9d:3a:29:98:
         92:65:f3:b9:bf:de:65:91:e3:32:cf:68:ac:7f:d6:a2:40:96:
         79:87:52:cd:f9:dc:7e:56:83:f1:86:bb:9c:2b:48:5b:f8:35:
         6a:7d:20:41:36:ea:4f:29:73:6e:76:2c:57:33:36:e4:6c:82:
         49:cd:a1:66:23:37:ea:13:03:29:c4:3e:e8:98:08:b3:79:f2:
         14:7c:47:d3:81:06:89:71:c2:c2:23:af:6e:b5:0c:ce:d5:82:
         64:d5:46:1b:be:05:ea:bc:d0:b3:df:b6:a2:45:9f:86:10:22:
         07:e0:b7:ef:86:f0:19:23:83:3c:62:c1:c2:0b:d4:d6:b2:32:
         65:b9:5c:27:f9:02:1e:9f:d5:23:8c:3c:4e:61:83:2a:49:71:
         77:21:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----