Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
File:                     is2ygftl8Ci3zcq5xHBup8RZQCI.cer (raw, json)
Hash identifier:          /EVLYNP84LVmm7b3vz5Vl1Ca5JFEHzA+Js2AuyKzdHo=
Subject key identifier:   8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6E7F412219D0599291AADE0465977
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47655
                          IP: 176.111.72.0/21
                          IP: 194.152.34.0/23
                          IP: 2001:67c:2760::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:e7:f4:12:21:9d:05:99:29:1a:ad:e0:46:59:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:c2:c7:81:98:fe:1b:9b:9e:14:13:f2:8b:
                    ab:72:3e:49:b4:bd:f2:7e:d2:49:db:62:ac:5e:ec:
                    8b:52:d0:29:be:ea:c0:1e:84:34:ca:ab:42:ef:b4:
                    53:ff:c1:03:c1:60:c2:3a:23:87:68:2e:63:9a:23:
                    ce:b6:77:f6:62:67:20:79:6f:61:6a:22:90:6f:97:
                    7f:22:f6:39:2d:da:59:e5:3d:59:d0:9d:9d:a2:70:
                    12:ae:f3:e1:25:a6:02:df:03:0a:2d:2d:da:c3:94:
                    01:5f:93:6d:3f:c8:4e:cd:b5:5c:cc:58:01:1e:bb:
                    d7:83:16:22:fa:0b:d2:cb:96:1a:d7:03:95:1b:74:
                    82:2a:40:2e:b1:28:1a:25:d1:94:4d:6d:74:b6:93:
                    7d:f6:3b:4f:53:e2:fa:63:93:43:82:61:db:23:f3:
                    4d:05:91:91:02:38:e0:3f:7c:b2:31:25:fc:b6:57:
                    2e:31:74:ae:ac:44:95:77:21:46:1d:1c:8a:4f:b1:
                    58:94:a8:22:83:f0:c3:ca:4e:94:c5:bf:da:81:17:
                    16:ad:6c:7d:7f:47:78:1b:93:5a:2f:9c:22:da:e5:
                    b2:c8:7e:bf:c6:f8:1f:a1:96:73:5d:41:86:39:22:
                    fd:63:ce:6c:27:b6:86:69:a5:aa:57:8d:9f:ad:0a:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.111.72.0/21
                  194.152.34.0/23
                IPv6:
                  2001:67c:2760::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47655

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:fe:77:bf:f2:4f:fb:90:24:ae:4e:b6:7d:ed:bd:82:e8:
         5c:79:eb:63:d5:ce:1d:d3:48:e0:ec:7d:43:08:fb:a8:47:3b:
         e9:d6:13:81:63:e4:ae:f1:e7:c0:1e:9f:7f:1d:cb:fd:de:e7:
         c7:61:d0:a7:ea:22:e1:c5:70:a6:1d:dd:7f:25:c9:66:eb:f3:
         49:89:df:de:a2:29:09:8c:51:78:dd:02:bb:a6:d8:f1:4e:c1:
         79:e4:13:2a:b9:9a:7b:53:64:b3:85:0a:60:45:55:1c:66:fb:
         fd:b1:12:b0:9e:ef:21:ba:ed:2c:0e:d2:db:5a:76:81:87:e5:
         a9:33:1c:40:57:b0:b0:78:79:73:ca:9c:98:ca:66:d5:46:99:
         4f:fa:9b:08:9f:cf:07:e1:58:f9:48:12:95:75:61:5b:49:32:
         2a:0d:6c:a9:8b:5c:d7:28:f3:60:db:a3:92:99:a9:d6:68:d1:
         d1:dd:0c:36:b1:16:3e:b2:6c:94:8f:c1:08:7b:40:a7:07:cf:
         69:02:5f:41:41:3c:63:7d:f2:3f:15:10:00:41:f5:f2:fe:b6:
         00:80:b9:fc:9f:40:ed:65:24:b0:50:01:04:c1:22:b5:d8:85:
         00:24:42:a8:42:65:1f:c5:e0:23:03:c5:d8:08:98:f9:2e:81:
         d0:5b:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----