Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
File:                     BYc3rBvKjBQos5aVRvGXTwaU5AA.cer (raw, json)
Hash identifier:          tpNw/AZEqbW4afGRGEFtwDOtXbppXuE0vHH9n5F1kDU=
Subject key identifier:   05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA051DE94020E36F76C1B8E3DF4274
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.163.108.0/24
                          IP: 2a10:b940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:05:1d:e9:40:20:e3:6f:76:c1:b8:e3:df:42:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=058737ac1bca8c1428b3969546f1974f0694e400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:7f:ab:e0:2a:71:6d:4d:11:08:b4:53:17:
                    d8:6e:84:2a:96:80:32:3e:21:f4:df:17:41:b4:33:
                    9a:d2:68:b2:39:85:7d:06:71:c7:82:7d:0a:8c:7c:
                    6a:e9:7b:be:84:92:57:60:19:3a:5d:99:88:27:7f:
                    f7:57:8d:a1:83:67:40:af:7b:af:bf:b6:1b:01:48:
                    10:ed:77:d3:ed:ad:3a:cf:c0:58:e4:f2:05:e7:02:
                    96:af:7c:38:b0:97:95:9f:83:65:a0:98:94:72:d2:
                    d6:23:8b:77:a0:a3:66:d5:20:6a:74:68:e4:12:fb:
                    c5:9e:3e:30:d6:eb:96:a1:65:33:9e:9f:42:97:0a:
                    69:f7:2e:a5:9e:a8:ac:87:b3:27:9a:dc:12:65:79:
                    86:20:a1:ef:0a:f1:31:c3:e3:7e:db:e5:20:e3:f0:
                    5b:2b:76:0e:39:0f:eb:a8:1a:74:99:ac:03:99:ef:
                    a7:e0:43:de:9c:c9:bb:49:f9:97:39:a1:1a:7c:14:
                    1a:63:eb:ac:c7:b8:7a:f7:9f:4a:08:91:db:ce:3d:
                    4c:bc:b8:7c:c6:54:69:5b:02:19:6e:42:11:57:f7:
                    f5:c1:f1:4f:1d:92:4e:1c:b1:d0:92:a7:84:db:49:
                    9b:04:54:a1:3f:65:9e:e7:90:cc:ea:f3:11:bf:aa:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.108.0/24
                IPv6:
                  2a10:b940::/29

    Signature Algorithm: sha256WithRSAEncryption
         74:9e:d5:db:93:ee:b2:56:c3:c9:53:d9:86:e3:61:dc:de:bd:
         5f:f2:ce:f5:d3:0b:75:82:d7:cf:10:5c:eb:23:48:8b:1f:ed:
         80:bc:b2:9b:ff:f7:2b:71:1d:2a:06:d0:5f:48:dc:87:f6:f9:
         b2:e5:c6:94:61:cc:69:62:d2:01:12:67:1e:af:fc:02:2a:a4:
         13:2e:da:4f:a9:1f:41:78:d5:7a:e5:91:52:c6:72:69:73:ee:
         49:05:c8:ec:00:86:3b:f3:03:5e:49:7f:91:eb:dc:83:4c:c8:
         44:40:e6:c0:d8:00:74:09:e9:66:f3:ee:10:58:90:29:a8:06:
         37:0f:b9:60:24:e2:91:bd:c0:68:e4:36:7f:ad:ff:19:d7:63:
         fa:54:7b:37:17:b3:d8:00:2f:0a:19:43:b0:85:f7:ab:82:88:
         0e:55:3c:61:7d:5e:7d:58:4b:7f:0a:58:cc:c5:aa:60:c7:82:
         f3:4b:a1:4e:3e:a3:4f:a8:7b:10:70:fe:b7:2c:4c:9f:79:3c:
         6c:e9:4f:0a:5a:9c:2f:3e:2b:0b:11:89:76:d9:50:c5:53:41:
         92:b9:6e:f8:9b:ae:d6:52:9a:46:8a:37:dc:9c:95:02:25:ea:
         3e:81:eb:09:a7:db:03:d8:f5:52:4d:93:39:49:d7:33:4c:88:
         43:29:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----