Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
File:                     nMYO2IFBiiF-jdPB-lI-JWXK65s.cer (raw, json)
Hash identifier:          paLIkFS34b9RVNA4B53iEWTtnT99uE2tluB8LVc6Wfw=
Subject key identifier:   9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252155635C190646DD24879EB62ABC10
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201702
                          AS: 211490
                          IP: 185.66.200.0/23
                          IP: 2a05:980::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:55:63:5c:19:06:46:dd:24:87:9e:b6:2a:bc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:67:c5:bc:86:f3:5c:75:a7:bf:28:f5:01:af:
                    7a:49:bc:cd:de:66:79:55:f2:60:7a:f3:15:ed:e1:
                    54:65:22:b3:18:09:c6:63:15:d1:e8:0e:f5:2e:c0:
                    65:94:28:1a:a7:21:c0:3e:47:97:ff:9b:36:3b:ca:
                    e2:7d:a5:99:c1:de:1c:b2:25:11:dd:f2:ec:1d:cb:
                    07:3f:24:cf:47:73:2f:09:67:1a:fd:41:84:25:c7:
                    5f:db:b6:ce:e6:70:73:ee:36:19:d5:9c:a6:06:ac:
                    56:b7:aa:84:20:fd:71:59:43:0e:24:33:94:1e:21:
                    d7:b5:67:40:3b:03:4d:8c:5c:f4:d4:6c:22:59:f9:
                    29:bf:b9:37:03:da:0a:7c:fc:ca:5c:36:d4:86:61:
                    f7:48:fe:e9:c5:3b:86:b3:6b:53:22:d3:a0:18:d6:
                    c1:c6:b1:d9:49:e3:fe:87:3b:73:bb:4f:fe:8c:c5:
                    80:f9:10:ba:82:ef:07:37:a2:07:ef:c2:31:7c:48:
                    00:4d:fc:38:8f:ff:ed:e9:85:43:6c:ae:8c:22:dc:
                    86:71:40:e5:89:78:e0:d4:1c:38:5c:51:40:96:6c:
                    6b:f5:dd:5d:a1:5e:31:62:7f:84:90:41:4d:60:b9:
                    28:97:7e:84:4c:f0:ce:b1:de:d3:f4:ef:40:7e:83:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.66.200.0/23
                IPv6:
                  2a05:980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201702
                  211490

    Signature Algorithm: sha256WithRSAEncryption
         71:06:b1:04:21:20:ca:75:5e:e0:fe:ac:6e:97:68:cd:a7:35:
         2e:de:31:bf:5a:dc:e5:3a:6f:99:99:88:ff:e9:01:1a:b2:4c:
         d0:aa:0a:1b:23:e6:49:21:c9:e9:e1:76:b5:9b:b6:14:e1:b7:
         9e:50:f2:e1:c8:89:93:c1:7c:a3:68:13:c9:a8:33:4b:32:57:
         a6:a5:01:62:17:ad:95:c2:c6:6b:c7:35:7e:43:85:4d:66:2d:
         4f:f8:b8:da:9c:42:33:87:c7:90:ff:a0:98:6b:96:c0:16:05:
         a3:ad:c6:20:82:1a:43:67:65:ec:a2:03:5f:a9:bb:bb:c7:fb:
         0c:d9:df:e0:86:75:f5:60:90:b9:f7:d4:44:bf:74:a0:ef:c4:
         bd:fc:64:d9:6d:9b:a4:56:e1:e3:f7:70:dd:56:11:ea:28:53:
         d7:72:ec:13:5a:1a:f8:20:6b:92:5b:6f:64:81:a4:75:13:d0:
         59:9a:a3:54:42:9d:94:3e:9f:00:27:29:20:2d:30:40:17:2c:
         e5:57:53:39:c0:14:a9:65:36:03:df:46:31:15:f9:ee:22:b4:
         f8:e1:32:e4:f8:ee:aa:82:52:5f:3f:40:d1:ff:d8:7f:d0:a1:
         c9:ca:2b:f3:9f:54:1d:44:36:e7:d0:0b:f6:41:d4:7f:35:43:
         2f:6f:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----