Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
File:                     yErFLitXLMKpmnQSV-VpqjceNWg.cer (raw, json)
Hash identifier:          +IbgwELlBok4bWifUyLx/0QB9FkNmzVq/ocId6ShjFM=
Subject key identifier:   C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6C59032712FC1FDF25EE57A444401
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 196651
                          IP: 195.246.244.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:c5:90:32:71:2f:c1:fd:f2:5e:e5:7a:44:44:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:b5:74:73:ea:5b:aa:62:02:47:6a:ee:80:
                    c5:76:2c:8d:81:7f:27:56:64:5c:5b:8d:34:27:e5:
                    25:18:c1:ec:71:3d:e4:66:31:ad:b6:69:cd:87:dd:
                    e0:ad:ec:76:a6:f3:1e:74:27:ef:34:ad:5c:8f:78:
                    37:7c:35:2c:0c:11:ae:c5:a9:40:9d:88:22:e7:a8:
                    68:1f:71:44:b0:a4:1b:13:10:2f:fd:b2:f7:18:96:
                    72:32:a1:3a:17:b9:eb:25:19:43:fc:5a:3b:03:3a:
                    fd:03:6c:52:34:78:ae:51:ce:cb:b8:f2:d2:20:b6:
                    d9:cb:de:6a:27:64:c1:cf:d2:a8:35:e7:7a:ef:90:
                    56:64:93:c5:ab:c8:93:95:35:df:23:db:2c:f4:ca:
                    c3:c0:35:12:f8:2c:64:c0:41:da:7f:75:fa:48:6e:
                    06:52:7b:ea:02:50:59:4d:ae:7b:ac:df:8c:fd:85:
                    d0:c0:ec:64:b2:ec:7f:28:b6:7f:f6:6c:3d:23:11:
                    64:e6:44:88:0d:09:4e:03:b9:fb:fb:73:8e:51:80:
                    19:60:6c:01:d8:6d:d1:21:0f:35:75:05:86:dd:1a:
                    2d:c3:26:2b:4b:84:26:37:80:41:4f:7a:fc:e8:87:
                    20:0f:61:ad:9a:c9:eb:41:5b:0b:28:c7:95:d2:9d:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.246.244.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196651

    Signature Algorithm: sha256WithRSAEncryption
         ad:55:c7:cf:59:3e:5c:c0:b1:46:4d:d6:7e:bd:b2:da:48:94:
         75:4b:5b:93:4d:5d:f1:63:23:4f:76:d3:d9:59:83:9b:b9:79:
         ac:e2:66:6e:d6:3d:2a:28:3d:70:5c:60:1c:17:c6:23:03:a0:
         d6:61:11:7b:fa:de:a4:e5:aa:7b:d7:5e:7d:b1:61:5f:f3:11:
         01:b5:65:69:d0:76:51:2b:ff:30:02:75:b7:04:4d:7b:0b:97:
         57:4d:55:a1:4d:56:4b:4c:ed:fd:cf:19:43:ef:43:6e:6e:75:
         01:bb:83:25:db:76:dd:fa:26:f7:84:af:48:f7:93:40:15:2c:
         44:15:26:94:97:85:53:1e:f2:d8:26:e3:00:66:61:ff:ae:bc:
         bf:a9:e9:61:79:0c:ab:9f:b4:db:8c:f5:4a:66:a1:2b:f4:67:
         f9:bc:2d:5f:81:72:bf:df:89:24:29:aa:dd:c3:9d:a7:3a:a0:
         d9:c3:ce:71:fb:b8:79:2c:6e:52:fc:ee:2c:52:db:a3:5a:19:
         45:27:e2:9e:7c:56:92:03:a0:75:0a:95:be:25:3c:fb:a1:a1:
         41:77:36:5f:9b:57:8d:89:56:d9:0c:7e:b6:52:6f:05:6b:85:
         0c:9d:e5:04:67:34:49:db:7e:32:f9:f4:5f:d0:a1:e3:a9:57:
         52:02:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----