Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
File:                     yPJYziA-BKM_TpBlEVOyWc_6Pog.cer (raw, json)
Hash identifier:          7LX0VZATNCNZeqEYTfINZXPrAH8Qh0BWdzJF3EzUGbU=
Subject key identifier:   C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747CC1420D4F08FBBF416BD216412ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200486
                          AS: 202701
                          AS: 208101
                          IP: 185.156.204.0/22
                          IP: 194.5.100.0/22
                          IP: 2a07:a100::/29
                          IP: 2a0c:e840::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:cc:14:20:d4:f0:8f:bb:f4:16:bd:21:64:12:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7a:8b:a9:b7:fb:a2:25:5a:7e:c6:8a:42:e7:
                    e7:3a:a1:d3:81:60:bb:a3:e8:20:4b:9d:9b:c5:b0:
                    08:15:20:b2:75:23:81:a6:3f:ab:04:51:79:94:98:
                    43:b2:d0:ac:e2:a8:87:a0:2e:22:ff:48:6c:48:60:
                    93:3d:ea:c3:46:1f:55:d9:b4:92:5b:07:a4:10:fe:
                    d9:c9:b9:4c:86:80:9e:97:fe:2e:6f:6d:8e:8f:0c:
                    28:5f:f9:e2:48:17:87:61:76:a8:2a:b0:d9:dc:44:
                    09:94:cd:bf:b8:14:3d:8c:96:8d:6c:28:ed:18:94:
                    2b:64:a5:d8:e6:ea:6a:99:62:73:13:7a:81:48:22:
                    cd:80:51:9c:0a:71:63:fd:cf:1c:f2:6d:1f:a6:f2:
                    4f:81:30:ec:8f:48:4a:4e:c6:d5:d0:f2:10:1a:38:
                    71:97:fb:cb:6e:a8:f3:83:19:41:ce:1f:dc:8c:a3:
                    f1:6e:af:ec:54:08:50:f2:e0:2f:01:51:97:5a:ca:
                    8a:cb:8f:30:a2:74:0e:95:49:aa:08:5c:58:71:25:
                    42:21:3e:9d:f5:56:13:ca:39:0b:89:ff:ed:cc:41:
                    61:13:36:02:63:bc:8c:fc:be:4f:aa:8b:b2:9d:50:
                    03:a7:39:8b:05:29:8c:33:23:96:6d:8e:d4:16:f4:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.156.204.0/22
                  194.5.100.0/22
                IPv6:
                  2a07:a100::/29
                  2a0c:e840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200486
                  202701
                  208101

    Signature Algorithm: sha256WithRSAEncryption
         41:51:f8:b1:52:94:b7:8a:f4:e1:eb:2b:06:84:f3:39:9d:41:
         b4:35:b5:49:5f:c4:5f:27:37:b7:97:03:d2:9e:c2:76:fa:7c:
         80:ed:e1:35:32:e2:0c:97:e4:5f:23:74:2e:4d:d0:39:68:76:
         73:63:5b:bc:c3:bc:47:00:fe:4b:8b:fd:ed:60:71:e0:00:6e:
         1e:f0:e9:22:62:68:9e:83:c1:fd:de:44:23:67:29:bd:41:e4:
         a9:cc:2b:ca:d4:62:58:bf:9a:fa:15:1b:7f:44:25:dd:3f:fa:
         c8:b9:c6:95:29:aa:4b:bb:a7:e1:d7:73:a2:72:d5:e5:3b:36:
         da:dc:ae:23:9e:48:f5:7d:c6:56:a3:77:b6:05:7e:03:54:6a:
         68:d6:1f:92:c2:f2:b6:97:51:e9:d0:3a:66:82:47:f1:95:3f:
         89:d9:2c:a2:ce:cd:52:c2:6f:5d:dc:52:1e:35:c9:6f:36:d6:
         3d:94:22:d0:3e:f7:47:47:df:56:60:6a:e0:fa:08:27:01:32:
         e6:43:3d:59:28:fb:0d:cd:ba:54:c3:54:a7:ce:b6:de:e9:1b:
         ae:a8:50:ce:60:94:51:0d:1c:f0:78:cd:f0:c3:52:58:64:24:
         15:ee:9c:43:1b:a5:26:69:1f:b7:40:56:30:9c:79:b0:0f:71:
         7e:cb:5d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----