Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
File:                     yTsGP8Y-ihq6H0MLLQdNvicL45U.cer (raw, json)
Hash identifier:          74Qmb3ghC9pVFlHFFvH2a291nKv/agNQmb8KLN93Sq8=
Subject key identifier:   C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942827281597AE932779F650E14B717862
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:54:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203221
                          IP: 185.141.248.0/22
                          IP: 2a07:2740::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:27:28:15:97:ae:93:27:79:f6:50:e1:4b:71:78:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:54:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:e3:de:81:3a:0d:dd:a5:06:73:09:70:a4:
                    4e:d7:43:ab:f1:d9:5d:3e:36:6c:a2:86:aa:df:78:
                    f0:b1:58:46:0f:de:68:a2:af:f4:6e:68:45:a5:9c:
                    77:ab:a3:2b:df:8f:08:90:42:1b:94:5d:ff:c9:a7:
                    95:3d:37:f8:8f:b6:4b:c2:49:bf:03:18:a4:c7:25:
                    91:c7:19:6b:2e:d0:3a:49:ec:d8:c1:8d:4c:90:0e:
                    a2:30:c1:f4:1f:85:67:5d:a6:a5:0e:9c:e8:51:65:
                    de:e0:45:5e:2d:aa:e4:30:d9:8e:b5:3c:44:0d:e0:
                    aa:8c:bc:d7:f0:e3:f8:86:b6:b5:5a:05:81:fb:1c:
                    5b:62:3d:80:b6:83:36:80:b5:92:26:ac:24:e9:a9:
                    ee:b8:83:07:11:f1:41:8b:3f:d8:fa:df:85:b5:d6:
                    ca:93:76:19:1e:76:43:95:98:a1:5c:8f:98:73:11:
                    2e:72:a3:fe:ed:1a:c7:5f:7b:79:45:4c:89:1f:3a:
                    c7:85:a2:51:59:6e:4e:b1:13:f1:ac:bf:84:d6:d7:
                    5e:0e:dd:94:8d:96:93:98:ad:38:c3:bb:72:6a:80:
                    74:a4:36:c4:b6:06:15:6d:9a:d1:12:bd:5b:e7:f1:
                    c3:f5:11:fa:da:1d:02:75:7a:b2:66:8f:56:51:ab:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.248.0/22
                IPv6:
                  2a07:2740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203221

    Signature Algorithm: sha256WithRSAEncryption
         36:79:52:f9:26:a0:8f:ea:21:26:e5:0d:9c:6c:0b:e0:a6:7b:
         63:22:35:6f:6c:5c:a9:f1:1f:b9:c8:e7:ba:78:26:0e:4e:a7:
         11:79:31:df:5e:94:32:88:2e:87:44:22:1f:48:d3:f2:c8:ef:
         79:16:8f:36:59:87:34:25:3d:fb:08:b8:a9:9c:73:f2:fc:c8:
         cf:e3:a5:43:fa:6a:4f:84:5b:18:28:d4:a1:22:ae:0d:48:8b:
         e5:3a:89:cf:64:ca:80:12:99:ae:b5:cf:cc:fc:26:89:63:65:
         ac:cd:82:6f:9d:65:bc:11:a6:8d:a3:13:f9:d0:11:1f:b0:b8:
         99:70:3e:8a:57:45:fb:ba:d5:a7:b0:60:18:82:77:85:d3:16:
         d0:7d:14:7d:ab:a2:dc:26:dc:ed:01:4b:2a:9b:3b:3a:ce:d6:
         02:e9:93:2c:94:5c:fe:bd:27:3a:ef:70:14:fb:32:96:0b:fb:
         43:42:5a:16:25:b8:30:34:af:ca:fe:43:71:fa:51:f9:d8:2f:
         bb:5d:b9:13:c2:a7:aa:fd:58:c5:58:56:d0:f9:2f:ab:f7:4b:
         24:ee:97:2b:80:7e:bb:82:56:bc:a4:94:87:97:bc:78:0d:c5:
         f9:23:2b:65:ac:9e:fa:62:51:11:0d:2d:3e:92:f3:85:d7:02:
         24:55:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----