Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
File:                     _ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer (raw, json)
Hash identifier:          xHCb6oQcn62hlrw6+EFW8ap1N8vMxkJ7/w9I5n20q44=
Subject key identifier:   FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F9F0DB6763A5CD80BFEEE5CFCE7BE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207076
                          IP: 2001:67c:1430::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:9f:0d:b6:76:3a:5c:d8:0b:fe:ee:5c:fc:e7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:76:95:b4:11:ad:62:d8:75:be:2c:0a:5c:
                    f7:46:5a:39:6d:7a:d4:0e:0d:9a:ab:43:b6:c7:7e:
                    42:da:5e:a9:1a:93:59:7e:ce:ee:58:4d:b6:b6:fc:
                    c7:21:4e:94:5f:9b:c4:ba:39:9f:b2:47:fa:f8:6d:
                    5c:3d:d2:a8:92:18:43:af:4f:53:c0:7e:77:76:ec:
                    80:52:60:5a:58:e9:ac:d5:9a:5e:4a:00:1c:d0:79:
                    d4:ce:8d:b7:c2:2b:fb:08:4d:3f:00:69:b5:4a:d2:
                    e3:68:81:2e:78:36:3e:ef:94:37:cf:30:8d:a8:5f:
                    54:38:f8:43:f4:e6:08:2c:cb:17:2d:8a:f8:6a:6c:
                    e8:f1:94:5c:f5:93:9e:45:12:bb:14:75:50:fc:2d:
                    ea:28:2d:8e:9d:6e:83:97:bb:10:ce:7f:f6:cb:be:
                    88:ea:45:50:b3:79:59:05:86:ee:10:f4:53:4c:00:
                    5b:65:0d:ba:bb:72:91:fc:17:35:e8:98:08:9b:52:
                    9c:67:48:b3:a8:75:7e:35:8a:8a:ad:b4:a7:86:83:
                    2e:43:72:69:cf:68:e3:ee:86:c9:e0:83:1b:73:72:
                    bc:73:e1:83:8d:f5:3f:28:10:75:61:fa:76:f5:06:
                    9a:9e:8f:38:0b:e6:55:64:ae:94:35:9f:6f:80:4f:
                    d3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1430::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207076

    Signature Algorithm: sha256WithRSAEncryption
         a6:7f:6e:08:b7:eb:31:89:25:35:9b:83:b3:1c:c0:2b:fd:26:
         f5:0c:87:f2:77:c7:29:1f:76:86:8d:52:1d:c2:76:44:dc:8b:
         dd:b0:7e:af:ed:e4:c0:9c:18:df:34:d3:8f:d5:a3:23:95:03:
         35:42:f0:50:14:ab:47:23:cd:c0:84:f6:fa:b0:a8:2b:81:ca:
         80:02:e4:b4:33:5c:58:6b:44:07:a8:f5:68:d2:c1:ac:3e:41:
         46:36:4d:61:fe:64:17:49:90:52:ab:0b:35:90:1d:59:f1:b8:
         09:69:3e:aa:33:4a:64:ce:97:72:83:ad:fa:f5:7f:17:43:c6:
         2a:6e:6c:5e:78:f0:8f:42:1f:91:e6:c8:50:33:f0:36:80:29:
         0a:d2:35:26:0e:c9:a4:34:47:72:f0:51:fe:99:6d:ec:77:f4:
         ba:f7:dc:9a:28:76:7f:86:de:c9:c5:99:dd:bf:e4:18:93:1f:
         39:53:22:69:ac:9f:05:99:8d:22:5b:94:b4:6e:4a:ea:30:ea:
         08:a4:ab:4e:18:b8:61:a6:01:f3:fd:eb:cd:ad:f7:f5:6b:15:
         9d:5e:b1:96:38:88:fd:5d:1b:7d:c9:7e:9c:2e:e1:42:cf:58:
         93:52:74:96:63:e0:18:98:52:c3:6a:0d:c4:81:5f:48:c1:60:
         fa:bc:f5:9b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQiH58NtnY6XNgL/u5c/Oe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjJhNTBlZWRmZTc4MDQwMjA5ZDZjMGFiOTVmODNiNTQ2MDM5OGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg92lbQRrWLYdb4sClz3Rlo5bXrU
Dg2aq0O2x35C2l6pGpNZfs7uWE22tvzHIU6UX5vEujmfskf6+G1cPdKokhhDr09T
wH53duyAUmBaWOms1ZpeSgAc0HnUzo23wiv7CE0/AGm1StLjaIEueDY+75Q3zzCN
qF9UOPhD9OYILMsXLYr4amzo8ZRc9ZOeRRK7FHVQ/C3qKC2OnW6Dl7sQzn/2y76I
6kVQs3lZBYbuEPRTTABbZQ26u3KR/Bc16JgIm1KcZ0izqHV+NYqKrbSnhoMuQ3Jp
z2jj7obJ4IMbc3K8c+GDjfU/KBB1Yfp29Qaano84C+ZVZK6UNZ9vgE/TvwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFP8qUO7f54BAIJ1sCrlfg7VGA5jdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzAxN2Y4
OS05MTMwLTRhNGUtODU0Ny1mM2I5NzQxZDFkNGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvMDE3Zjg5
LTkxMzAtNGE0ZS04NTQ3LWYzYjk3NDFkMWQ0Zi8xL195cFE3dF9uZ0VBZ25Xd0t1
Vi1EdFVZRG1OMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBQwMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMo5DANBgkqhkiG9w0BAQsFAAOCAQEApn9uCLfrMYklNZuDsxzAK/0m9QyH
8nfHKR92ho1SHcJ2RNyL3bB+r+3kwJwY3zTTj9WjI5UDNULwUBSrRyPNwIT2+rCo
K4HKgALktDNcWGtEB6j1aNLBrD5BRjZNYf5kF0mQUqsLNZAdWfG4CWk+qjNKZM6X
coOt+vV/F0PGKm5sXnjwj0IfkebIUDPwNoApCtI1Jg7JpDRHcvBR/plt7Hf0uvfc
mih2f4beycWZ3b/kGJMfOVMiaayfBZmNIluUtG5K6jDqCKSrThi4YaYB8/3rza33
9WsVnV6xljiI/V0bfcl+nC7hQs9Yk1J0lmPgGJhSw2oNxIFfSMFg+rz1mw==
-----END CERTIFICATE-----