Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
File:                     maYtMHOoLahlQqz8Nvb8ueZqBbs.cer (raw, json)
Hash identifier:          paY15GQSY5gO9h03RSVWB9/Ocldj8NN+YJypHJiaiqU=
Subject key identifier:   99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B119B831CBD5FD8786B3C12164A6F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:48:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211654
                          IP: 45.81.88.0/22
                          IP: 2a0e:5280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:11:9b:83:1c:bd:5f:d8:78:6b:3c:12:16:4a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:48:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:72:d5:94:60:ee:eb:f6:c9:e4:41:b1:be:
                    bb:95:45:8a:59:4e:65:2b:c0:73:31:5e:8e:e5:34:
                    80:8f:bc:35:7c:ee:0d:44:aa:1a:0d:ac:8f:0b:61:
                    24:1b:54:66:34:3c:b2:ad:95:1a:b9:16:8b:b6:8a:
                    c1:94:f5:91:49:82:70:2e:8e:57:f3:1b:eb:32:82:
                    b9:02:94:fe:33:5d:a6:84:a2:b4:e7:82:25:10:47:
                    0a:eb:41:28:6e:d4:fc:e7:86:c6:49:4f:82:c2:83:
                    1f:46:85:c7:05:80:dc:cf:1d:44:0c:d4:4e:88:1a:
                    ee:84:22:59:35:0c:29:27:bc:19:fd:b2:c0:13:27:
                    5d:c6:26:4d:de:fa:90:96:2d:19:65:21:5e:12:f5:
                    0d:59:fb:9e:10:b3:0d:e0:43:ac:12:97:e4:02:21:
                    b1:ec:24:3d:9a:f0:c6:7d:2e:1b:0a:0d:ae:c1:ac:
                    ee:fc:b6:99:16:5f:6b:c0:d7:27:db:e8:74:10:fe:
                    8e:4d:2c:01:75:f5:55:eb:ee:16:48:b4:91:d5:0d:
                    3e:03:7c:d0:18:a9:02:d5:3f:ce:4e:1b:77:43:ef:
                    8b:7f:7e:63:d0:35:54:46:1e:b3:22:d3:2b:90:64:
                    73:c3:b9:77:44:51:2e:a8:92:a1:b3:73:b2:78:08:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.88.0/22
                IPv6:
                  2a0e:5280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211654

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:e7:07:1d:4e:01:4b:99:b5:2b:d0:36:45:ec:cd:a4:7a:
         23:f9:9d:26:b2:2f:85:cf:6a:4c:5c:34:2e:74:08:cf:fb:f7:
         1c:d7:0f:a2:eb:61:da:68:aa:59:8f:4a:ae:51:8f:cf:27:ef:
         63:05:23:1b:91:1c:c1:f7:3f:ed:5a:06:3b:bc:c2:7d:60:98:
         a5:34:6a:70:a8:fd:11:76:b4:7d:a4:d1:3e:a3:9c:5c:6d:cf:
         b1:a0:07:c1:d3:25:69:e3:dc:72:f9:66:8f:a7:32:e8:70:6d:
         57:a7:e9:20:7d:12:f6:aa:1c:75:3d:0b:fa:a2:bd:f8:58:df:
         af:14:31:00:09:de:aa:ba:44:4c:80:ce:f7:83:63:58:6a:26:
         6e:ee:50:45:e8:c7:9a:b7:49:04:e2:4f:6c:6a:1f:73:75:c3:
         0b:03:d2:de:4d:f1:d8:bb:fc:97:95:b7:fb:46:ac:0d:55:1c:
         24:fe:2c:36:67:f5:95:a6:5f:f7:08:1f:d3:d2:84:8c:d3:0a:
         c7:7d:f5:e7:4d:92:50:8c:7d:88:09:74:8f:78:90:9a:5b:65:
         0c:02:0c:2f:b8:8a:3b:cd:00:4b:80:52:0b:68:de:79:d0:db:
         e9:42:83:41:0f:3e:5e:09:c8:48:d6:4f:fd:22:67:ef:84:ec:
         b4:62:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----