Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.cer (raw, json)
Hash identifier:          SyO0Il5nvtwY9Oe4t29gALckXMqngvyBHAnq9MsoNms=
Subject key identifier:   C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7533155C3F642885C1C49C4FF7A85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201145
                          IP: 185.75.96.0/22
                          IP: 2a05:50c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:53:31:55:c3:f6:42:88:5c:1c:49:c4:ff:7a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:23:1b:02:89:3e:35:89:5d:07:5e:27:90:
                    cd:61:8b:04:76:ba:6d:bf:ac:23:d1:f9:0a:d0:41:
                    44:5b:04:11:d0:b1:e2:78:82:2c:8d:be:72:1b:5a:
                    88:bd:42:ac:09:26:11:93:30:a3:63:ed:9e:b5:50:
                    f4:99:84:0c:10:6b:14:d6:c8:70:28:96:7c:52:9f:
                    ed:2a:2d:96:74:49:f6:ae:f1:28:47:12:42:8f:de:
                    25:9f:26:3a:ce:2c:34:c0:d4:0b:75:c1:66:ba:d9:
                    20:3a:c4:67:6f:52:cd:8f:1b:8a:b1:65:ca:f6:d9:
                    d8:13:15:53:a6:bc:df:f7:b6:9a:ef:fe:15:6e:b4:
                    a1:b3:2e:36:94:18:70:c2:e0:d6:71:31:5f:f8:67:
                    7d:7f:b3:00:76:1f:1c:62:e2:aa:d7:49:2d:6e:d6:
                    44:68:a4:78:7a:79:a9:41:5f:67:6c:41:0f:4a:7e:
                    15:21:6e:f6:36:cd:fd:86:a0:9b:2d:a2:9c:fc:32:
                    03:7e:bd:bc:e4:ba:ac:45:cd:f8:ed:bf:fd:5d:28:
                    9e:54:27:f8:db:87:98:63:6c:e9:16:0a:48:fc:c0:
                    a7:99:43:ad:82:52:b5:df:ab:c8:10:dc:fb:b6:d1:
                    88:18:c6:e2:02:15:82:21:10:99:58:de:a9:10:4b:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.96.0/22
                IPv6:
                  2a05:50c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201145

    Signature Algorithm: sha256WithRSAEncryption
         a8:80:1d:bf:0c:61:ae:86:6f:c4:5c:68:82:c8:31:cf:16:39:
         6a:14:5d:8f:11:87:69:b4:7f:3d:8a:12:32:14:e8:9c:21:6a:
         3c:c8:83:77:e8:7e:c2:0b:86:d2:6c:4b:c8:91:c3:5c:f7:29:
         ed:b9:93:29:ea:2f:00:63:2e:db:2c:ab:f0:d2:5f:68:5c:8e:
         dc:3e:42:aa:ac:df:33:aa:49:ab:a2:42:8a:d2:a1:ef:75:a0:
         85:71:2d:71:8e:08:b3:b2:0a:3a:98:cd:75:8b:25:01:1e:cb:
         96:71:a1:d4:2e:6e:e4:51:a1:1b:7f:d8:90:e4:01:17:19:cd:
         1c:d9:de:53:47:a8:6e:92:fb:08:34:0c:9e:d1:97:98:4c:e8:
         e5:49:23:cb:42:22:18:46:9f:27:a8:c9:c8:b3:91:85:13:80:
         2b:86:74:3b:69:b7:08:f1:85:f6:bf:48:d1:00:30:72:20:d5:
         ba:2a:e6:0b:c7:83:48:61:6e:27:64:4d:80:a5:9d:16:a8:23:
         b5:98:db:bc:fa:52:f1:d5:78:02:b0:98:05:2b:8d:b2:c4:34:
         d2:8e:cc:4f:ae:8d:1b:e1:97:6a:88:c2:a4:78:78:2f:96:25:
         ef:ae:cc:e1:49:15:63:fb:32:10:af:bb:73:3e:66:1a:77:30:
         0e:f0:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----