Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
File:                     yy2f-G42PbNNBVbsFkUfL38wPSQ.cer (raw, json)
Hash identifier:          GhdC+wxDvc3Av2S7akjNgUREC8hvnjrZYzdT04Lq3K8=
Subject key identifier:   CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FF10141EFACA146412A9CCA8ED2B3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 5.153.112.0/20
                          IP: 185.74.120.0/22
                          IP: 2a00:d3a0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:f1:01:41:ef:ac:a1:46:41:2a:9c:ca:8e:d2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:c7:00:0e:66:9b:7e:06:3d:87:5e:6f:c9:
                    8c:db:49:10:0d:d5:1d:fa:87:14:db:11:38:d2:ec:
                    bd:39:db:79:68:99:e5:c4:77:3a:e7:4c:aa:20:8d:
                    4c:d5:60:d7:85:5e:c8:c7:65:98:b9:b1:0c:bf:5c:
                    5b:06:3d:43:cf:22:1e:6b:dd:25:c0:d5:a2:32:f0:
                    2a:1a:a7:17:44:3f:95:00:4a:45:07:7e:a1:51:d3:
                    57:28:69:66:ee:8d:ac:f5:07:86:d3:26:98:f2:ce:
                    4e:15:bd:73:14:10:ff:82:ed:37:ec:da:a0:68:b2:
                    08:f0:3f:84:fe:36:03:94:c2:59:61:65:72:97:a4:
                    b5:f6:a7:00:e7:a6:59:5c:c0:51:70:09:fa:db:11:
                    23:3e:a8:51:d7:09:06:a8:74:c0:cf:be:3b:ef:42:
                    89:f1:c5:4b:4d:1b:20:e2:e8:15:80:5d:50:49:ba:
                    57:8d:e9:8a:56:37:be:17:66:6d:6c:f4:6a:be:36:
                    c4:d7:07:9d:12:1b:11:97:1e:b8:29:5e:ac:37:6a:
                    87:7c:a3:15:f5:9e:7a:ae:f6:f8:fd:22:35:ce:62:
                    00:c8:97:6e:80:f9:8a:eb:26:29:3f:80:e1:57:cb:
                    0b:f2:53:16:6c:33:45:3b:19:e2:e4:e5:d4:b1:99:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.153.112.0/20
                  185.74.120.0/22
                IPv6:
                  2a00:d3a0::/29

    Signature Algorithm: sha256WithRSAEncryption
         18:63:a7:5f:cf:a0:b3:26:61:02:d8:d0:3f:95:23:29:36:44:
         f0:28:ab:bd:81:bd:80:3c:ad:24:0c:8e:a8:a6:66:20:bb:c6:
         06:76:90:46:15:70:83:5b:8e:44:d1:62:40:b0:a2:69:26:01:
         67:14:0b:d0:b0:ae:55:57:80:05:0a:3e:2e:2d:53:0b:2f:aa:
         22:1d:57:60:31:da:42:ab:e9:64:06:15:02:6d:f4:b9:b7:13:
         05:e0:32:07:ce:f2:c5:48:47:b1:07:c3:98:4a:3f:25:be:ec:
         ad:02:5b:5a:55:4f:b6:24:2c:5a:66:4f:39:7a:8c:82:93:39:
         8b:b8:86:c8:7f:bf:6d:df:ca:bb:70:79:54:5a:f5:d2:de:6d:
         b6:70:f7:d5:05:47:d2:4c:10:74:29:eb:66:bb:2d:3e:d1:c4:
         9c:1a:f9:29:41:d1:0d:0e:82:e5:ed:27:3d:70:70:a3:56:74:
         36:26:29:58:83:93:67:56:b4:64:38:19:22:e0:b5:fa:7b:9e:
         c1:0a:f0:4c:8b:e9:39:ad:83:e6:5f:7a:9e:12:22:bf:ae:b1:
         d7:83:0f:a0:57:64:a5:81:a2:f7:7d:06:69:f0:15:6e:04:65:
         d7:70:32:1e:3d:29:92:32:74:c4:42:0c:c2:b3:88:61:7d:67:
         b0:ce:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----