Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
File:                     ydWxKeBvlSRoXnABAoQfctaRXDM.cer (raw, json)
Hash identifier:          W7m4MzDSdXEBS/DfAwoHUdeHPIcbym8606ZGQaHyT0k=
Subject key identifier:   C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01954C12B7A2AC3B5D67B702D3E9105B1610
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 10:20:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60714
                          IP: 86.54.192.0/21
                          IP: 91.212.79.0/24
                          IP: 2a13:f280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:4c:12:b7:a2:ac:3b:5d:67:b7:02:d3:e9:10:5b:16:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 28 10:20:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c9d5b129e06f9524685e700102841f72d6915c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:75:f0:74:c1:ea:e4:08:2f:7c:3b:d5:89:
                    20:72:0a:97:81:3f:29:b5:93:16:30:0b:de:44:e3:
                    23:7d:14:ac:f1:c1:17:d7:53:de:3c:a7:f4:c3:73:
                    6d:36:60:c1:de:dd:61:79:e4:fb:d5:f7:7d:91:f6:
                    a3:5e:59:96:3a:8c:43:f8:95:60:d8:9e:26:e3:52:
                    0a:b6:f1:ac:2d:3a:41:c2:e3:5d:ab:d8:96:58:59:
                    ef:b2:48:65:da:52:b9:e8:1c:cf:a6:1f:f7:56:65:
                    d7:d7:fa:b5:bb:e0:19:be:e2:9f:d2:55:5b:d7:c2:
                    50:b5:e6:ab:75:21:87:32:66:bd:bf:6e:22:39:dc:
                    7e:bb:37:08:6d:00:bf:04:63:c5:a8:2d:f5:c8:e9:
                    a9:6f:02:dd:af:e9:6a:a4:13:41:60:48:a9:7f:3c:
                    8c:09:89:d5:c5:72:d5:b4:b1:ac:71:e9:0a:dc:10:
                    44:6e:f0:df:cb:73:cd:67:df:01:02:4e:e3:bb:1d:
                    af:6d:46:72:6c:9e:84:83:1f:c4:03:f2:d3:35:fc:
                    3a:1c:39:72:d0:57:7d:2d:8d:4d:a3:0c:16:71:8f:
                    5b:8d:5e:cd:4a:66:38:82:5a:53:d3:ca:d3:48:08:
                    ae:54:4e:9e:36:76:27:5f:89:93:e9:a1:9a:49:89:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.54.192.0/21
                  91.212.79.0/24
                IPv6:
                  2a13:f280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60714

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:19:1f:f4:10:a5:59:9d:c3:be:ab:18:6a:12:a0:2b:dd:
         c6:2f:63:80:53:39:11:1c:e7:15:0c:8d:39:84:88:d8:02:aa:
         68:09:18:1c:ce:84:a6:de:00:bb:91:be:b1:09:28:40:c8:4a:
         2a:ba:26:92:46:d0:4e:50:b9:71:5c:25:68:10:b2:68:33:a1:
         db:ab:94:0c:08:3b:2f:b3:2a:13:fa:92:a0:ee:6d:e1:9b:81:
         e0:42:70:72:b0:50:eb:9d:0a:18:48:56:dc:4a:31:e5:b5:94:
         2e:6d:6b:9e:8d:82:fa:49:ca:c9:2f:d6:73:41:1e:c4:dd:1e:
         26:19:bf:98:dc:bb:ac:30:02:2e:7a:86:c6:32:73:e7:a7:8e:
         1c:ab:11:50:7b:ad:44:ac:cf:b7:e0:15:fa:0c:19:d9:b2:c9:
         f5:bd:8e:83:1a:cf:17:d5:4e:12:75:1c:a0:a9:a3:47:e5:50:
         dc:5f:f4:62:fb:2c:a0:c2:32:dc:1d:d3:a5:ac:fc:46:dd:94:
         02:cd:a5:f5:8d:6f:fc:7f:66:b8:79:9a:c4:94:8b:9f:e9:2f:
         b1:6e:9d:fb:c6:85:67:52:32:da:41:09:a3:58:d4:20:2b:9c:
         ab:3e:2d:c3:da:06:c9:07:12:ea:c7:9f:e1:6c:df:e7:99:b9:
         08:05:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----