Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
File:                     aYVKV6sNijySLI9qeaqP6KaiwJ4.cer (raw, json)
Hash identifier:          0uFzZLq/fL9crLyNPreHp7DoICM310+iBhfSOne3iVk=
Subject key identifier:   69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214433D447D06B0F401E7EEFB5C28E9E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.34.200.0/22
                          IP: 2a0c:bb40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:33:d4:47:d0:6b:0f:40:1e:7e:ef:b5:c2:8e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:cb:c7:d3:5d:13:99:3a:b9:f6:fd:5e:18:
                    2e:a2:64:c0:c5:da:b8:dc:6d:54:be:a4:43:48:86:
                    cc:c0:c7:98:4e:37:82:0b:fe:c4:1b:0c:90:ce:d0:
                    07:6e:ee:f1:59:b2:fc:7a:fb:8f:71:dd:40:06:10:
                    40:88:6f:79:4d:20:31:23:b2:a1:08:eb:2d:f5:0a:
                    a7:0b:e8:9d:ad:74:d6:0c:30:35:1d:4c:40:e6:17:
                    46:b9:98:fc:05:70:77:07:e6:fb:7c:90:61:a4:61:
                    d2:42:59:c2:bc:b9:31:a2:1d:31:d2:88:72:77:07:
                    f9:16:c1:99:8b:0e:98:42:c4:4c:82:aa:15:37:a4:
                    54:62:9d:7b:29:36:58:f8:16:e0:08:b9:85:a1:37:
                    49:61:d5:49:3a:5c:4c:8a:a6:d6:2a:9f:be:6f:ad:
                    de:65:6e:07:3d:89:26:ef:d3:e6:8f:c4:64:3b:7d:
                    17:27:a2:0d:c6:c9:31:e6:41:3e:98:18:66:ca:ab:
                    68:b3:20:be:83:6f:0c:db:e5:fa:02:85:1a:40:f1:
                    10:fa:6e:f5:85:2d:34:57:5d:94:d4:fa:13:10:67:
                    b6:9e:79:6d:e7:c7:04:c9:03:3a:82:05:79:7f:55:
                    2b:35:59:b8:1e:d7:5a:89:8a:43:34:5a:9e:57:99:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.200.0/22
                IPv6:
                  2a0c:bb40::/29

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:e0:5b:0e:bd:8d:4e:64:d4:56:17:16:99:68:b8:e1:2a:
         d3:77:96:c8:d1:67:1c:49:d6:b0:68:bc:52:a1:4b:18:27:b3:
         8a:86:e4:2b:f0:a2:37:75:9e:22:93:f4:c6:ca:24:80:80:0f:
         75:a3:f5:b5:23:4e:ba:b4:78:83:cc:d7:17:ba:7e:ac:06:c9:
         93:92:cb:35:28:8c:34:d0:3a:98:45:67:7d:3f:bd:b1:c1:d1:
         6d:04:49:61:09:72:e4:09:f4:40:64:e0:b6:30:74:e7:bd:6e:
         f0:66:fb:58:0a:e7:0f:52:6b:59:d6:92:93:d8:bf:99:83:92:
         47:ec:47:1c:c9:57:69:3e:bc:a1:ae:22:42:24:90:05:44:b8:
         f2:be:ca:db:93:29:24:bb:33:69:48:a4:43:eb:bb:4b:39:e9:
         57:a5:05:a3:11:8a:8c:17:31:a6:4d:70:34:0d:74:b0:d7:31:
         b5:b3:24:72:84:90:a6:4f:7e:c2:be:81:bb:19:68:6c:60:4e:
         8a:f5:55:fb:67:e5:62:d8:14:b9:10:a4:10:bb:bd:5d:ae:30:
         d7:b0:b0:18:72:74:32:97:07:a3:36:39:d1:7a:f1:5a:52:b5:
         dc:fe:4f:5d:b7:ba:a9:96:25:e1:7f:1a:60:9e:52:f0:a7:24:
         76:67:75:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----