Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
File:                     8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer (raw, json)
Hash identifier:          LDvw6VnrZfOwmR5V/P5Qeqvz4UgeXne71LSSmDOwHN0=
Subject key identifier:   F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01958AB3E54941CD899E4B1F724756900217
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Mar 2025 14:13:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 78.41.63.0/24
                          IP: 2a14:bc80::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8a:b3:e5:49:41:cd:89:9e:4b:1f:72:47:56:90:02:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 12 14:13:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f3211d2ecd60924ef2276f86939b070c0081574b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f8:41:43:a5:7a:14:d0:73:bc:5d:78:ae:49:
                    93:d4:c1:41:0b:a1:bb:6b:99:b9:b5:e9:6e:23:5a:
                    07:23:fa:5f:e5:68:72:30:2a:14:ce:4d:47:75:5b:
                    24:06:44:7f:58:8b:6e:84:f1:5d:ba:c8:94:ab:c6:
                    ac:fb:62:8c:10:c3:d4:1d:4e:d8:06:ef:27:21:15:
                    b0:ab:5d:b6:42:17:ba:51:87:67:9a:79:0f:b6:4a:
                    23:a8:e9:ef:0a:65:36:e0:72:fe:87:98:3c:c1:84:
                    19:b4:0f:41:4c:64:d3:dd:90:44:ef:82:00:45:d1:
                    7f:f2:b2:b7:9a:9b:60:00:31:ce:8c:a2:0f:79:da:
                    89:e1:b7:9f:d2:79:9b:15:d2:43:14:e4:05:5a:fd:
                    08:62:b8:c4:1b:29:d0:e8:e1:86:17:16:e3:92:55:
                    1a:95:a7:54:0c:b0:e9:e1:6d:6c:d7:79:a1:c3:7a:
                    38:9c:dc:96:00:63:34:0c:e2:63:73:9a:ae:ce:e6:
                    8b:13:e2:be:17:3f:1c:f3:3d:a0:4d:71:f0:c8:08:
                    f0:ba:20:10:85:a0:f8:57:0a:b4:38:3c:53:07:81:
                    44:09:c7:22:1d:a5:73:45:ff:54:15:a8:64:fa:e2:
                    ea:dc:8e:c1:7d:c7:dd:bc:0a:0f:83:f3:5a:4d:c3:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.41.63.0/24
                IPv6:
                  2a14:bc80::/30

    Signature Algorithm: sha256WithRSAEncryption
         2d:db:2d:31:ab:aa:6e:6e:6a:5d:99:69:3e:88:3c:26:3e:fe:
         65:0f:d0:a5:ff:37:b6:18:49:fe:9c:cc:9e:3b:c6:7b:e1:25:
         5e:fe:ce:10:1c:1f:4c:8f:9e:b2:01:82:17:f4:99:7c:4d:02:
         29:33:fd:2c:9c:0f:f4:08:5f:02:d4:81:3c:38:57:d1:36:84:
         51:62:b7:94:72:4d:5a:26:43:b2:47:23:7b:c8:04:f6:d3:a8:
         07:79:0e:cc:fa:aa:8a:95:78:99:21:7a:18:45:d4:8d:21:5a:
         63:eb:c6:66:8f:23:e1:de:af:9d:ed:78:1f:f4:18:b0:0c:5a:
         67:19:fc:4f:6e:54:5b:2d:23:64:f9:8f:f1:ad:0c:b6:b2:9c:
         af:57:df:b6:df:36:7c:5e:5b:c4:b7:74:51:66:4c:f8:eb:59:
         6c:3f:09:d0:e5:cd:c3:80:d9:f8:4b:9a:0d:7a:c1:f4:59:71:
         4f:e9:68:13:14:2f:eb:fa:85:c0:02:a9:a7:00:67:2c:d1:d7:
         9a:ad:3b:1d:af:b1:aa:e4:2f:57:3a:81:18:21:ef:a8:70:1c:
         37:36:32:d2:9b:4d:77:d6:b7:bf:00:41:68:84:1f:df:8e:c1:
         8f:75:71:86:8e:2e:dd:4f:3d:4b:00:69:01:65:39:dd:ee:e7:
         ca:85:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----