Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
File:                     YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer (raw, json)
Hash identifier:          3Pq+iBHquOtuf8vSorkxW9x8pg2fqU/0iD5MPcFfEnU=
Subject key identifier:   60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC0821F2E2163B4DFB9EFEFAD527BC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 25420
                          IP: 77.244.48.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:08:21:f2:e2:16:3b:4d:fb:9e:fe:fa:d5:27:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6050099e335409db03ac1133d164f02a0d5dc66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:a7:5a:73:5c:9d:c3:c0:d0:a6:4a:0f:ce:
                    66:96:c5:eb:89:e5:97:e2:93:74:75:33:d5:ca:8d:
                    0c:02:0d:4f:0b:b0:bf:b5:51:1b:c9:43:0f:d4:ca:
                    8b:b4:39:83:91:8c:be:e7:d9:cb:79:b1:91:ef:ab:
                    f1:c8:75:91:d7:04:66:0a:ff:c3:42:92:74:dd:18:
                    89:4c:cb:8b:24:49:c4:0b:51:67:e5:9e:a8:ab:4c:
                    55:97:3d:2c:f0:ac:a4:f2:53:23:70:8f:5a:35:85:
                    bf:7e:b9:75:c9:6c:9a:94:2c:7c:db:1e:25:bf:46:
                    19:b3:4e:66:51:65:2a:1d:f9:6f:91:a0:8f:10:a8:
                    31:1c:94:2c:fc:2e:27:ba:f9:87:cb:10:62:00:a0:
                    ef:1b:3c:e1:e0:b8:5c:69:7c:a2:7c:d9:45:f4:d1:
                    e1:86:4e:93:ff:0b:ce:f6:b7:6b:f8:6c:95:f8:3e:
                    8b:a4:cf:8b:79:b3:0f:bf:59:9e:8e:fa:c0:f3:37:
                    4b:d4:86:b0:9f:bf:77:cb:0c:c2:20:41:f1:1f:80:
                    9b:c2:76:df:1a:8c:f0:ad:9e:75:74:74:3c:64:73:
                    a9:7d:2f:38:db:3a:8c:72:36:5b:24:e5:fa:d6:bc:
                    d0:a0:e6:5e:35:04:43:98:a3:9e:22:c2:82:c8:7f:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.244.48.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25420

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:5a:de:04:5f:92:1f:d4:24:9c:97:c3:00:28:7e:2a:9c:
         c1:99:a0:21:d9:df:a2:1c:7b:68:eb:14:e9:98:6e:ad:81:a1:
         30:a0:2e:83:d6:b3:64:ed:dd:f2:b1:d3:b3:ba:30:9e:c3:bb:
         bf:f5:4a:7c:48:1a:9f:5d:d0:61:97:f6:f9:cf:a6:3e:a0:ae:
         7f:1f:1a:ef:64:2b:24:39:8c:f4:ab:82:6d:6e:46:62:6d:a3:
         75:e3:8c:fd:f5:8e:89:2a:ea:a0:96:8e:02:ad:b9:68:28:89:
         ac:e7:72:7c:1d:1b:3f:7e:d9:a0:73:6a:c9:56:46:90:6a:28:
         c2:40:f2:7c:dc:69:fa:e3:a1:0c:3e:74:2c:60:f8:ff:f2:7d:
         48:ef:b5:07:c5:4f:0d:08:8b:10:f4:6a:8a:23:34:3c:c5:d1:
         f4:eb:16:f9:2f:c8:ad:d7:5c:19:11:dd:47:5f:b8:05:a2:6e:
         10:d0:9f:2a:2f:58:51:e0:e5:61:b9:1d:f8:44:e9:fb:27:a6:
         9d:79:6f:d9:19:09:2d:c7:30:1d:94:20:d7:05:a7:72:25:93:
         ab:72:27:0b:32:02:9d:9e:bd:83:08:de:c1:26:c5:bb:9e:d6:
         81:f9:05:49:8a:5f:11:a3:df:94:ee:a9:93:18:00:fb:b2:c5:
         c8:14:8a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----