Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
File:                     9Y3yxGnJeIlfhFgCTFBugByPsho.cer (raw, json)
Hash identifier:          +iUUqGszsLY12WhcVchSsDo4PjF9Q3dyF5BgL0mmsLs=
Subject key identifier:   F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942827D8623B8454FDA98F14CC0F503134
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:54:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.189.60.0/22
                          IP: 2a0b:d680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:27:d8:62:3b:84:54:fd:a9:8f:14:cc:0f:50:31:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:54:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f58df2c469c978895f8458024c506e801c8fb21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:ff:0c:d4:2f:35:07:a2:93:de:f9:a9:20:
                    10:ec:c4:32:a9:e4:fb:52:e8:9a:4b:59:9f:52:52:
                    cc:7e:7f:58:a4:a1:e7:27:32:73:b6:53:e0:3a:dd:
                    1b:a9:79:05:11:73:8c:42:ab:85:19:84:95:23:69:
                    2b:c7:3d:1a:c0:de:00:8c:9b:95:96:06:31:eb:11:
                    67:28:19:70:cb:ef:19:3a:36:40:42:62:91:7f:83:
                    a4:dc:9b:9c:d1:51:c5:50:8a:f5:78:73:77:41:29:
                    2d:7e:c1:19:38:3c:71:bf:6f:fa:6d:09:28:77:22:
                    13:62:d9:cc:89:46:e7:0e:17:d7:22:28:bb:97:72:
                    39:bc:af:29:73:59:3d:54:84:47:1c:06:27:2f:35:
                    89:11:40:a7:98:41:9c:77:8a:cf:c7:6e:d8:f6:e7:
                    37:9d:1f:9d:9f:e6:8a:b3:5c:82:a8:2f:52:ec:e1:
                    0f:8e:e3:a5:02:6d:27:ee:0b:eb:68:e0:ca:3b:a5:
                    39:09:36:82:14:fd:d8:ce:e7:84:f9:ba:46:19:a5:
                    eb:1f:55:02:af:2d:27:f5:0a:f2:ac:a2:04:e5:c8:
                    73:c7:c8:f9:fa:34:0e:09:a0:6d:c0:7a:20:3e:40:
                    3b:9a:21:5a:6c:8d:b3:8b:2d:fb:1f:23:83:63:21:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.60.0/22
                IPv6:
                  2a0b:d680::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:44:86:7b:5e:69:d7:71:8b:bb:00:b7:86:47:2f:cc:15:ad:
         39:11:40:4e:16:18:5d:e9:09:93:0a:9a:53:ff:a5:96:90:dd:
         31:09:d8:9d:79:49:cf:c2:3d:18:51:c1:1a:b1:bd:b3:5e:8b:
         27:ed:7f:78:fd:98:5d:ab:a0:9c:f1:66:16:6f:37:e3:cf:e9:
         9d:b1:41:3f:18:e3:0e:55:aa:c0:28:b7:7a:4e:de:b1:e5:be:
         c6:c3:53:90:54:68:88:3d:ff:f2:b6:db:60:7c:d6:77:18:6c:
         15:82:76:5d:28:80:36:7c:fb:0b:d1:b8:60:d9:c4:71:85:fc:
         64:e6:78:8f:34:1d:57:1e:9c:5f:62:2c:ac:9d:93:38:5b:ac:
         75:00:5e:2d:5b:d8:86:33:b1:9c:c1:78:85:97:ed:f7:61:61:
         d4:54:72:ea:6a:e5:78:db:35:de:53:a7:9d:2a:b7:8b:67:b6:
         37:51:c7:80:b6:fc:f6:08:b2:15:cd:2a:59:b2:6c:db:ea:7c:
         f4:9b:1d:39:19:fe:c8:7e:60:e9:ec:35:ab:5c:0c:ad:ac:08:
         34:1a:3a:59:8a:70:b3:f4:92:9e:0b:c6:00:5b:69:61:99:b0:
         87:ac:60:69:49:8d:72:2d:63:d8:57:9b:d6:bc:8d:92:59:4a:
         fe:15:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----