Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.cer (raw, json)
Hash identifier:          iLyZPasiAdT11TdhTr0s3sQtQ3/rS6MnB3emFxkqsdQ=
Subject key identifier:   60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206832C3F88C1EC8BE51FC6168BCE8D7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42833
                          IP: 5.104.24.0/21
                          IP: 2a03:a280::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:32:c3:f8:8c:1e:c8:be:51:fc:61:68:bc:e8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:e7:68:d9:ec:81:0e:e3:75:e0:27:da:40:
                    ba:13:d0:3e:e5:62:54:6f:4a:45:40:d2:89:0f:6e:
                    56:72:22:e1:e2:91:66:39:20:0e:95:59:9a:0e:42:
                    d5:53:0f:5e:ce:04:87:60:f1:42:b3:06:d9:ef:70:
                    bb:8d:1a:15:64:34:c6:45:38:f3:12:09:64:58:5e:
                    13:30:b9:f6:05:31:eb:62:df:09:97:39:7b:bd:5f:
                    ad:89:7e:2d:0f:ed:17:cf:62:8c:3f:00:f2:f7:5a:
                    fa:19:fa:dd:88:e3:f8:d2:29:36:87:c9:bc:91:7e:
                    3a:b1:1f:a0:c3:74:0d:42:95:36:a6:e0:33:ad:9e:
                    e2:f3:ec:ed:00:bc:5a:cb:07:65:89:1f:c4:87:38:
                    a0:4d:a4:22:3b:f2:3d:56:ec:5b:a6:cc:85:65:5a:
                    8c:18:4c:5a:6d:8b:31:cc:68:0c:ba:b0:99:39:08:
                    7d:40:f0:4d:12:4c:7c:02:3e:1a:1f:ed:00:b9:3a:
                    2a:5e:e9:a5:03:bf:d0:b3:dc:54:12:4c:ad:4e:e5:
                    6c:2e:1f:05:a0:1e:5e:3e:d8:d6:0c:c5:04:89:2c:
                    54:12:f7:8c:40:e8:6f:69:95:cf:76:c5:c8:15:ef:
                    2d:0a:a2:cc:2a:e4:bf:2f:20:c0:83:15:aa:55:fe:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.104.24.0/21
                IPv6:
                  2a03:a280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42833

    Signature Algorithm: sha256WithRSAEncryption
         84:ab:ed:5d:2e:eb:c2:45:6b:0d:99:8d:21:58:ed:29:f7:c7:
         58:51:b8:dc:fd:19:92:6d:9e:f7:26:be:92:42:5f:fb:5b:03:
         a8:65:09:95:41:6a:a3:98:f2:9b:42:5e:91:d0:a3:17:41:0c:
         8e:b9:e6:4e:23:66:ea:e6:6d:7b:54:44:b8:50:01:d8:37:10:
         32:24:ea:dc:f8:7c:f0:cf:e7:94:55:11:07:ab:88:7f:90:97:
         9d:42:b1:b3:42:ec:fc:ef:4c:4e:dc:09:d2:de:63:46:b8:45:
         59:68:f9:87:89:12:47:36:b2:34:35:23:4c:ab:d8:25:5c:78:
         a5:f8:91:a0:bb:eb:28:e2:4f:cf:ef:e3:d6:69:b2:fe:bb:2f:
         61:7d:69:a7:a8:2d:50:27:21:10:2b:c8:ba:4a:a5:a4:2f:8e:
         ad:6f:52:f5:d4:77:11:41:fb:78:35:b3:a6:d4:46:9a:ff:60:
         d0:51:38:06:3e:f2:5e:80:d1:60:1d:d3:16:f1:79:a7:c7:66:
         3b:26:d5:bc:6b:53:8d:15:41:05:aa:9b:60:f4:1a:c6:8a:ea:
         16:96:1e:c6:80:ff:7e:6b:27:e2:df:b4:ad:75:d8:2e:c2:d9:
         d5:a7:27:67:93:ac:0a:4d:42:82:15:46:12:8c:a0:a5:2c:43:
         59:76:49:7a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQgaDLD+IweyL5R/GFovOjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDhlNmE2YTU0MDE3ZGQzYjliMmNjZTM1ZmQ1YTlhN2YyYTQ1NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRjnaNnsgQ7jdeAn2kC6E9A+5WJU
b0pFQNKJD25WciLh4pFmOSAOlVmaDkLVUw9ezgSHYPFCswbZ73C7jRoVZDTGRTjz
EglkWF4TMLn2BTHrYt8Jlzl7vV+tiX4tD+0Xz2KMPwDy91r6GfrdiOP40ik2h8m8
kX46sR+gw3QNQpU2puAzrZ7i8+ztALxaywdliR/EhzigTaQiO/I9VuxbpsyFZVqM
GExabYsxzGgMurCZOQh9QPBNEkx8Aj4aH+0AuToqXumlA7/Qs9xUEkytTuVsLh8F
oB5ePtjWDMUEiSxUEveMQOhvaZXPdsXIFe8tCqLMKuS/LyDAgxWqVf77BwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGCOampUAX3TubLM41/VqafypFSYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2MzMzI4
ZS0xY2U5LTRlMzgtOWVjYS0yMzI0OTc3YzkzOTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvYzMzMjhl
LTFjZTktNGUzOC05ZWNhLTIzMjQ5NzdjOTM5My8xL1lJNXFhbFFCZmRPNXNzempY
OVdwcF9La1ZKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDBWgYMA0EAgACMAcDBQAqA6KAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCnUTANBgkqhkiG9w0BAQsFAAOCAQEAhKvtXS7rwkVr
DZmNIVjtKffHWFG43P0Zkm2e9ya+kkJf+1sDqGUJlUFqo5jym0JekdCjF0EMjrnm
TiNm6uZte1REuFAB2DcQMiTq3Ph88M/nlFURB6uIf5CXnUKxs0Ls/O9MTtwJ0t5j
RrhFWWj5h4kSRzayNDUjTKvYJVx4pfiRoLvrKOJPz+/j1mmy/rsvYX1pp6gtUCch
ECvIukqlpC+OrW9S9dR3EUH7eDWzptRGmv9g0FE4Bj7yXoDRYB3TFvF5p8dmOybV
vGtTjRVBBaqbYPQaxorqFpYexoD/fmsn4t+0rXXYLsLZ1acnZ5OsCk1CghVGEoyg
pSxDWXZJeg==
-----END CERTIFICATE-----