Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
File:                     yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer (raw, json)
Hash identifier:          L0/4paWFBEdJOrFSCiD3IO2RiRdIYh3Zmtru4r/3dxQ=
Subject key identifier:   C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D97469C73151FB939140DE6EF69331
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.136.128.0/22
                          IP: 2a03:a4e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:74:69:c7:31:51:fb:93:91:40:de:6e:f6:93:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:0c:57:c7:b7:c9:b5:6e:14:14:68:53:7b:
                    d8:13:03:ba:c0:fb:52:88:18:f4:a1:82:aa:79:70:
                    cc:19:20:c9:d9:80:ce:52:50:23:1f:e3:4d:0d:d7:
                    55:3b:da:3d:97:74:ad:44:e2:79:ef:66:b0:fc:43:
                    e2:9c:bd:9c:b5:b9:1b:31:3f:0a:82:b4:a2:46:b8:
                    0f:33:fd:ec:a6:42:7f:73:78:de:e0:12:56:55:b5:
                    82:c2:fa:20:5f:66:39:5d:fd:eb:96:3d:59:8c:a4:
                    f1:8b:33:20:7a:fb:e7:f1:56:bd:51:70:52:ce:1b:
                    5d:5f:29:01:9a:5c:d4:33:f3:92:45:ec:53:e6:a9:
                    3c:11:85:33:3b:27:28:6b:3d:7e:0f:25:02:d6:1c:
                    25:d5:62:08:1f:c1:a3:bd:85:94:07:35:11:75:c3:
                    5b:ae:c9:89:d1:fc:4f:05:48:ca:d6:2d:03:1d:27:
                    12:a7:5e:4b:14:60:9a:e8:e8:a4:18:73:e8:68:12:
                    92:56:c2:37:0f:07:50:a8:91:dd:4f:83:8a:23:69:
                    c8:02:c3:a9:4c:87:5d:34:c8:14:21:33:35:00:fd:
                    f3:0c:0a:50:4f:5d:fe:09:30:d8:f8:90:df:0d:d7:
                    88:8b:9b:2d:2e:ad:a3:f4:f0:78:20:b4:3c:b1:b1:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.128.0/22
                IPv6:
                  2a03:a4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:2e:85:a1:c8:56:bc:38:6a:c9:98:4c:ef:0f:9e:92:3c:3d:
         9c:17:e6:39:1a:9b:93:0c:de:6b:29:9c:d9:36:c5:4f:6d:6d:
         7e:f0:2b:35:9f:89:40:49:94:7d:58:a4:f8:94:b1:bb:80:62:
         19:70:c3:12:f8:a3:8f:26:60:61:a2:84:f4:4b:c2:df:1c:07:
         e8:bf:75:97:5f:47:c8:cb:ab:62:f4:d5:4c:b4:c0:1c:08:5a:
         8d:64:08:4f:ed:60:4f:c1:a6:d4:69:c0:15:82:2b:21:4f:1e:
         e7:11:c4:a4:ba:22:e2:90:96:c7:ca:90:79:8b:55:62:90:f4:
         87:01:9f:97:ce:2e:0f:31:b4:31:0c:ad:dc:f9:b1:b5:ba:72:
         2f:79:8c:a9:73:d9:7a:da:5d:62:96:2b:d3:c3:02:f3:16:0a:
         6a:80:5f:dc:42:88:e5:0b:fd:b6:78:b8:14:cf:54:6c:5c:a5:
         e1:3a:6c:77:bc:90:ab:c8:e5:44:46:f7:e2:9e:a1:6f:58:34:
         34:55:ef:99:51:2e:1c:40:32:a9:eb:d9:df:a3:4d:84:b0:f5:
         b4:9f:fe:4e:0e:2f:be:97:5a:a1:a7:5b:37:e4:22:a8:e0:3a:
         df:43:1f:35:71:1b:de:5f:9c:8e:f8:fb:89:eb:24:96:3e:23:
         3e:ea:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----