Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.cer (raw, json)
Hash identifier:          J4tP7UwqKnVovpk3wDIVqrTiemh8XOWaxV/fRr2kUVs=
Subject key identifier:   7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942220294F350BDDA9B969D0845A249CD7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 82.192.96.0/23
                          IP: 82.192.100.0 -- 82.192.111.255
                          IP: 2a03:9e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:29:4f:35:0b:dd:a9:b9:69:d0:84:5a:24:9c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:84:a1:f0:bf:59:c8:be:f3:cb:25:ef:7a:db:
                    54:19:b4:4e:a1:d2:1c:9a:94:2d:d3:97:d8:ed:27:
                    76:16:0f:27:d3:23:54:51:70:04:f7:e0:d8:b0:db:
                    b6:d4:b9:d3:3c:27:52:09:a6:2a:df:88:31:a0:40:
                    d1:94:9c:0c:7a:89:d7:f9:08:08:33:ac:d5:db:3c:
                    89:0d:82:31:ed:e2:1f:ad:22:40:17:52:df:a1:44:
                    b2:cd:5c:89:05:57:33:82:25:1f:f0:33:fb:ca:2f:
                    aa:4c:4c:09:42:54:62:75:bf:5b:c1:f0:25:89:e9:
                    49:bb:58:09:7b:8e:12:a3:f3:3c:04:09:05:91:f2:
                    7c:45:23:92:f8:05:09:77:6d:50:d0:47:44:62:25:
                    03:f6:8f:51:42:fb:ef:e9:25:3f:be:e2:fb:88:75:
                    b8:aa:51:8f:4b:77:e1:de:ab:27:4e:54:d1:25:ea:
                    85:a9:ce:bf:b7:55:e6:12:b5:5e:70:94:e5:f3:28:
                    0b:4d:54:79:99:c7:cf:b4:25:ba:16:0d:6e:20:c8:
                    09:97:b7:be:59:3e:8d:b7:be:77:f1:90:bb:bc:a0:
                    2a:c2:d4:33:7b:cb:ff:7a:5e:37:52:7b:4c:94:ac:
                    74:b3:c2:aa:83:da:1e:b8:b0:4d:9a:f7:71:b4:11:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.192.96.0/23
                  82.192.100.0-82.192.111.255
                IPv6:
                  2a03:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:2d:77:98:eb:62:53:97:09:d9:fc:6c:eb:21:80:d8:fd:
         02:85:7d:e2:65:8c:16:b8:7d:d1:dc:13:66:1d:18:de:78:2c:
         4d:63:04:fa:3d:6d:4e:17:5c:9c:0d:1a:d8:88:1f:4c:61:21:
         37:8e:c7:7c:59:ce:83:27:ea:f3:58:1e:cb:b0:69:3d:d2:45:
         7c:48:b6:03:e4:cd:a5:8a:77:5f:80:b1:e4:af:73:44:ca:2c:
         c9:fe:ed:af:e0:8a:67:af:99:f2:ba:8c:b4:88:fb:fa:a3:c5:
         fd:d5:f7:07:de:e1:6b:c7:57:aa:01:da:15:a1:bf:2d:22:b1:
         1a:df:4b:de:2d:f3:7d:94:8d:2a:1f:98:7e:3a:89:f1:98:5b:
         d2:42:3b:68:1d:33:89:ac:05:04:0f:17:58:05:6d:5f:fc:5d:
         e8:0e:ac:d6:16:c7:ba:b9:2a:d3:e5:78:e2:e2:5b:4f:61:1d:
         31:bb:cc:ba:a6:ed:57:c3:1f:16:e2:b0:d9:4b:cf:5d:b8:74:
         7a:91:de:c3:1f:00:56:41:68:d8:5b:a5:b5:66:1f:fe:18:9d:
         65:81:b0:30:25:b3:19:fb:b7:a5:2e:93:fc:3c:fe:04:9c:67:
         3e:fb:50:21:7c:ec:a1:9a:9a:82:0f:38:98:87:ab:1f:73:49:
         44:79:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----