Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
File:                     LKYTd0lZnAPHtHLxQscZaAAGtuY.cer (raw, json)
Hash identifier:          1i2UcHBLnPIie02M2BYLxriDOJXh1jipcopCb56k4tQ=
Subject key identifier:   2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6102D3913A11E55873B4322774F33
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47700
                          IP: 91.208.107.0/24
                          IP: 2001:678:478::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:10:2d:39:13:a1:1e:55:87:3b:43:22:77:4f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ca6137749599c03c7b472f142c719680006b6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:7c:39:a5:4f:31:9a:7e:6b:9b:b9:a9:22:
                    40:8d:b3:01:38:bc:05:92:f4:c0:f8:ed:35:ea:4c:
                    1e:ee:0c:76:50:e2:3a:a1:af:cb:f7:65:16:89:1d:
                    eb:7a:33:f9:39:64:23:00:8c:79:0b:fb:0e:81:f6:
                    4f:3f:21:86:7f:85:e7:8a:0c:e7:ad:e8:1f:ff:40:
                    26:bb:8a:f7:09:0a:d0:9b:48:4b:43:a9:d0:31:11:
                    e9:d3:77:ac:09:b6:e1:a5:15:49:fe:eb:91:51:df:
                    6c:a6:d9:ce:c4:97:00:57:6a:45:10:db:f2:84:8f:
                    6d:14:bf:ba:d0:de:bd:b5:6d:8e:e6:69:87:03:86:
                    81:99:25:1d:a2:34:94:c8:34:4e:d5:4d:d3:f8:9e:
                    00:2e:37:9e:d4:79:34:22:fb:d4:8f:41:9a:78:fc:
                    af:3a:86:bd:a1:fc:72:8f:bd:13:06:13:2e:07:a5:
                    65:76:c5:f4:c2:c2:73:a8:6a:86:8e:d3:ef:70:bb:
                    92:be:d1:93:3d:4e:59:b7:26:55:1b:4b:86:17:a4:
                    7a:6a:ed:75:8d:23:28:49:d7:bb:d0:c7:85:27:49:
                    c5:2a:7f:d5:7b:3f:7a:c6:aa:2a:34:01:13:68:3e:
                    fa:76:b0:f1:70:d9:45:3f:27:d7:cc:f4:bd:9b:c8:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.107.0/24
                IPv6:
                  2001:678:478::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47700

    Signature Algorithm: sha256WithRSAEncryption
         87:58:f3:01:dc:e4:d6:f7:2c:95:4f:61:38:f5:13:9a:cf:ae:
         bc:e2:bb:95:9c:49:40:b7:94:55:d5:da:37:a8:4a:a4:49:69:
         09:35:f2:f2:76:d5:65:6e:82:8f:d9:9c:55:46:85:45:9f:90:
         ef:f0:38:6c:d8:b9:d9:d6:4f:3b:ef:25:94:27:ad:77:6f:6a:
         ec:9c:79:17:24:8c:62:32:d7:4a:09:62:45:92:60:90:5c:72:
         ec:d2:df:16:31:98:02:10:a2:d8:ac:6d:28:37:a1:90:a5:ea:
         ce:92:98:41:00:e3:14:05:9f:2b:11:74:dd:0e:bc:39:c6:d6:
         b9:2c:96:ac:16:34:9d:6e:d6:cf:19:90:e8:13:68:4a:85:d5:
         b8:22:f2:19:be:6b:e0:b0:05:91:09:d5:8c:16:b9:ef:1d:29:
         15:b5:3c:fa:05:45:cd:48:9e:07:61:f0:7c:d4:33:30:f3:e7:
         1d:a0:d6:f1:7f:80:5a:97:c0:48:52:f3:7a:76:62:29:67:40:
         14:42:c1:2a:0b:90:53:24:91:2b:93:61:39:61:a0:04:24:cf:
         40:58:97:5d:f2:71:20:f9:65:33:67:a1:16:bb:94:fb:c3:c6:
         22:5a:00:34:ed:5d:f5:38:96:97:fb:8c:13:a4:d5:c5:81:2f:
         93:5e:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----