Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
File:                     IMnySVGbH_R5NQ8xclT0Bei_yr0.cer (raw, json)
Hash identifier:          v3xlzOvfyLQPp57+Gyw2qsbT1grEXSqLnCqOmtdZVQs=
Subject key identifier:   20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067F5AC31AE80068DD57E5006ED7F3F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60500
                          IP: 2001:67c:1b80::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:f5:ac:31:ae:80:06:8d:d5:7e:50:06:ed:7f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=20c9f249519b1ff479350f317254f405e8bfcabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:10:53:8f:17:18:84:b1:23:74:e0:d2:3f:
                    e5:13:19:2c:c7:13:2f:44:d0:ce:e5:9b:b5:b5:be:
                    1e:f0:26:5d:44:6e:1b:32:19:94:7d:c9:1f:b7:51:
                    81:0e:4a:0f:fe:57:4a:52:1d:64:5b:f5:a7:a4:d9:
                    9a:0c:1d:1b:3e:f7:ab:a1:45:c3:88:80:46:b6:65:
                    d6:36:62:13:4e:f6:e4:5f:4d:4a:ee:cd:42:fc:6b:
                    48:ef:ce:9d:71:4f:68:27:f4:82:fd:3e:67:f3:aa:
                    9e:6e:48:45:d2:10:b3:16:19:4e:88:9f:84:8a:af:
                    63:b4:cd:27:70:f2:5e:64:91:8f:c7:2f:51:e8:e6:
                    cb:38:10:4f:69:d2:8a:0a:2b:dd:3f:89:85:fa:3a:
                    9b:08:d5:fd:fe:7d:0e:2a:b9:4e:e6:66:2a:8c:be:
                    f7:d0:b9:3c:6f:b9:ad:77:fe:a3:53:b9:f5:7d:8c:
                    c1:25:62:67:95:ba:ac:6c:8b:41:a0:5c:a4:51:14:
                    28:eb:89:f2:9a:22:44:25:82:27:ad:31:2d:21:1c:
                    54:af:ba:a2:5a:ee:69:9a:4c:76:c3:17:e8:22:48:
                    2d:60:35:03:be:4b:a5:81:94:98:10:37:66:fb:bf:
                    f6:93:26:9c:e5:7b:75:b6:29:70:a6:5e:88:65:9e:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1b80::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60500

    Signature Algorithm: sha256WithRSAEncryption
         90:25:d0:bf:e5:09:4f:6b:e0:65:4e:88:f8:0e:40:18:19:f3:
         35:19:09:4c:ea:54:c6:87:a3:46:bf:54:ac:9b:1f:e0:3e:bc:
         19:cd:86:49:4e:86:b7:60:59:27:f3:ea:4c:f1:4e:3d:6c:89:
         cd:89:e5:08:a3:6f:c1:df:fb:e8:b1:fd:c6:22:4f:bb:83:c6:
         81:61:96:00:bd:41:2f:51:d0:27:ed:a1:51:d3:61:d0:a1:14:
         fb:57:38:17:6d:22:4d:1b:15:bf:46:90:f6:73:f3:81:8f:42:
         af:94:64:8e:45:2a:1c:75:81:aa:e0:39:6d:22:97:df:a2:4f:
         d6:e4:64:04:0d:6e:a5:f8:c0:fa:11:aa:d7:61:57:a9:b8:72:
         df:8a:01:90:8d:1d:2d:67:57:f2:c1:23:7d:2b:01:45:2e:fa:
         4c:1b:b4:f7:9a:8b:09:92:af:ea:1a:e1:cf:ec:96:8e:2c:5b:
         22:50:d4:92:bc:52:16:f8:f9:89:df:2c:6b:1d:4b:65:e0:3e:
         74:b8:d7:ae:77:c0:2e:d5:25:35:de:14:d7:87:23:9f:c0:c9:
         90:88:7a:ea:02:3e:15:00:c3:fb:f5:e5:d7:c8:0d:b1:82:b1:
         3b:9a:88:6c:b2:02:cc:21:d3:be:e9:90:77:0e:f6:97:73:bb:
         24:f2:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----