Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
File:                     8yf6fhlHLlg7cgk2w50P0kJmGf0.cer (raw, json)
Hash identifier:          93vBMsNBVPhGnkQjdaK9+QJCBznXk3596ItzyF8Ut1I=
Subject key identifier:   F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421438689E4E3028D6E6C7B0F2984523D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209350
                          IP: 78.24.207.0/24
                          IP: 2a09:5e00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:86:89:e4:e3:02:8d:6e:6c:7b:0f:29:84:52:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f327fa7e19472e583b720936c39d0fd2426619fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:7d:5b:d5:ed:57:48:3b:bf:03:72:d6:a9:
                    9c:b3:89:97:b7:96:e4:83:1f:2d:c8:39:57:16:81:
                    4d:22:76:e6:02:e5:73:66:19:e7:bf:55:af:35:b9:
                    2c:c0:33:20:8a:36:b0:a7:de:cc:f2:78:da:a1:52:
                    31:1b:1d:d2:9e:32:9d:0d:e3:38:3c:ea:e9:82:b4:
                    54:2f:ad:2d:2e:c7:f4:1f:da:8c:a1:4e:65:b9:63:
                    26:ed:85:88:b9:26:98:f0:79:34:f5:94:e9:a4:09:
                    46:80:cd:11:19:94:54:8e:a0:bf:13:e4:73:51:8f:
                    39:fd:1a:9e:fb:a1:33:3b:1e:74:de:57:04:29:cd:
                    b1:b7:7a:08:8c:78:d8:bf:41:83:b6:88:16:d4:90:
                    e9:4c:6f:80:58:0c:c6:1b:d9:9d:a8:5c:9a:4b:37:
                    9d:1b:1c:54:ab:64:35:5d:b0:55:d7:02:6a:ec:c3:
                    78:59:10:44:b9:86:dd:21:e0:bf:fd:83:69:7e:a7:
                    96:b5:05:b4:90:63:41:b8:d2:ec:8e:b5:f6:2b:2e:
                    89:ca:cd:54:cc:e1:9e:e7:e8:bd:cf:67:f6:b2:69:
                    8c:9f:45:c3:2b:16:2b:44:5b:e0:85:9a:ec:08:df:
                    5e:ec:ba:89:ca:e1:4d:79:28:dd:55:2c:0b:6f:43:
                    0a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.24.207.0/24
                IPv6:
                  2a09:5e00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209350

    Signature Algorithm: sha256WithRSAEncryption
         29:38:1b:71:b0:88:ca:95:e2:61:73:b2:56:c3:e4:00:bc:c1:
         63:40:29:c0:37:6a:d0:71:c1:39:54:52:a7:90:5c:11:eb:de:
         60:03:50:96:b8:70:f3:66:eb:02:93:98:02:5a:95:b1:45:5e:
         2a:45:14:12:da:0e:80:72:af:42:e0:0d:ea:77:c6:a5:c2:af:
         72:9d:2b:c8:42:0b:38:65:83:41:37:ac:10:33:df:d1:b1:38:
         50:b7:77:5d:cb:bb:f9:7b:9d:6c:ed:f6:bf:01:cb:b2:c2:8c:
         e2:a2:9d:83:85:ec:9f:bf:dd:10:94:82:4a:61:6f:de:39:d4:
         24:45:c7:11:b5:a8:3c:7a:86:46:b6:ed:ba:1b:f1:ac:e7:a1:
         12:67:a9:49:b1:a9:21:7d:2a:b7:ef:4f:1f:99:e3:1d:d7:ec:
         ce:13:51:54:5a:cb:fa:ce:7d:3b:46:f5:f1:6e:11:70:c9:d6:
         36:76:0b:7d:de:95:63:21:50:85:bc:cf:1e:42:22:25:85:51:
         9b:ba:6f:d1:69:99:8c:de:fa:1e:24:35:f1:c4:d1:d7:fc:35:
         d5:6b:32:96:11:43:fd:6e:d4:90:6c:45:5b:50:ec:17:ef:c5:
         06:da:c2:16:68:40:cf:d5:d2:0b:86:d3:d0:a0:9d:68:61:55:
         94:7d:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----