Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
File:                     YictaPs4lesim2j41DNBJLlnxw4.cer (raw, json)
Hash identifier:          5RDjChPoLawcHNDz23U8cBjTWAgvmBhcprpCfsha2b8=
Subject key identifier:   62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D735A1550079F6ACEA7D88C1E49BE8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211441
                          IP: 193.38.246.0/24
                          IP: 2a10:e2c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:35:a1:55:00:79:f6:ac:ea:7d:88:c1:e4:9b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=62272d68fb3895eb229b68f8d4334124b967c70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:99:58:ea:b2:08:e1:83:d8:0a:05:97:6b:
                    6b:07:34:fa:aa:29:22:05:0b:64:24:f3:c3:43:95:
                    d4:26:8d:a5:f5:41:52:ef:93:ff:37:07:b0:d0:c6:
                    81:17:07:3e:ea:ae:b0:bb:3f:ca:db:fb:9b:a7:b1:
                    9e:c8:35:ab:fd:e1:44:62:23:b0:17:7f:79:0b:5a:
                    9a:fc:c0:ec:aa:b1:27:39:cd:73:a9:cb:af:ef:c8:
                    ee:53:0b:cd:7e:44:11:1e:6d:04:17:56:30:40:d0:
                    a0:5a:50:44:c6:d6:84:8e:1e:5d:63:12:a8:c6:3e:
                    68:c0:52:eb:63:27:82:7e:f4:59:b8:50:95:59:ca:
                    c2:13:8a:52:74:ea:71:12:ef:4d:3d:f0:bd:d9:ef:
                    7a:39:12:67:f4:8c:45:b5:80:bd:0b:06:09:9d:b0:
                    90:56:52:24:86:ed:c3:e9:56:26:28:ed:ae:c0:03:
                    a2:ad:db:0f:a3:f1:03:da:07:2f:af:79:71:bd:2c:
                    53:3f:46:c4:c5:94:84:a0:67:9c:d1:ce:11:a7:88:
                    38:7c:68:4e:26:c6:9e:82:69:e0:32:98:47:7d:5d:
                    1c:2d:d5:07:9d:9c:45:da:a5:d3:e6:72:ac:7d:dd:
                    6e:b7:7c:86:69:56:d1:ec:90:2c:0a:11:5c:f1:1d:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.246.0/24
                IPv6:
                  2a10:e2c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211441

    Signature Algorithm: sha256WithRSAEncryption
         ae:5a:af:7b:0e:40:3d:12:12:34:48:f7:23:10:5d:99:70:01:
         a6:59:8e:60:78:84:82:01:f1:5e:ec:89:bd:54:0e:26:05:dc:
         dd:66:f9:74:04:43:96:93:4d:8f:d6:4a:03:b4:52:d6:e1:11:
         dc:9c:7a:5f:03:d9:3c:81:57:22:b8:dd:93:e1:9e:69:10:0e:
         ec:4b:31:95:31:f0:ae:79:ae:e8:1c:ba:27:b7:d6:1a:6c:4b:
         2d:65:d3:fe:11:bc:46:8c:3c:e9:f6:27:ae:8b:5b:1a:d7:15:
         b0:5d:52:8b:44:0a:ab:73:e1:ff:e8:cb:87:90:c0:99:09:92:
         4a:82:63:58:f8:ad:0a:17:9d:ee:6d:9e:c5:63:47:f0:61:e5:
         44:de:38:7f:c1:2f:c5:e4:27:06:a7:87:be:e5:3e:23:bd:58:
         0a:4e:32:7e:37:8c:5f:a4:ee:03:8b:f8:0f:2c:1a:c6:75:68:
         aa:06:52:1d:b2:e5:e8:fc:2f:a3:33:6a:55:12:35:38:74:17:
         2e:be:e7:79:7a:0a:f2:17:16:ec:1e:a2:d8:b0:73:1e:82:de:
         74:87:11:1a:96:8d:9f:ba:54:34:2a:4b:ef:e9:00:8d:4b:ea:
         4f:23:30:75:bd:36:40:20:aa:6d:77:b4:45:1c:19:0e:f6:57:
         96:06:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----