Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KY2bT7TP4nih65-iA1oInEwlaFg.cer
File:                     KY2bT7TP4nih65-iA1oInEwlaFg.cer (raw, json)
Hash identifier:          9TwtXQLg0xHeK0gVVdCDinpsCSoyK/nGsGZ847zHu74=
Subject key identifier:   29:8D:9B:4F:B4:CF:E2:78:A1:EB:9F:A2:03:5A:08:9C:4C:25:68:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C3A3FB53FBA022C3E0183A8E11A11
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12643
                          IP: 146.140.0.0/16
                          IP: 2001:67c:134::/48
                          IP: 2001:67c:34c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:3a:3f:b5:3f:ba:02:2c:3e:01:83:a8:e1:1a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=298d9b4fb4cfe278a1eb9fa2035a089c4c256858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:a1:bd:c9:6f:c5:51:3e:54:fb:08:cc:3f:
                    29:48:19:fe:17:87:3b:99:21:b4:57:ac:5e:72:72:
                    d8:a4:76:ca:fa:73:db:65:60:67:a9:3c:9a:91:65:
                    43:dd:6c:4f:12:1a:e2:93:f3:0d:5a:4d:bc:22:65:
                    7e:c7:b9:9d:3c:f6:ba:ce:b4:c0:10:4a:ff:e7:1c:
                    d6:2a:09:7e:ac:9f:55:90:d5:19:a2:36:fe:42:dc:
                    9e:a3:ac:ad:dc:c2:24:c7:72:ce:00:99:87:17:37:
                    10:2f:d4:88:3b:2c:44:08:9b:a3:4e:24:03:6c:5e:
                    f8:2c:df:61:ef:51:85:30:3b:19:fa:c0:ce:33:b2:
                    8b:2d:67:df:f2:cc:08:64:9a:d5:cd:11:c0:4f:17:
                    dc:19:c9:24:bf:3b:1b:70:59:a2:5e:b9:4b:77:ea:
                    96:6c:62:72:b2:b6:52:ea:d9:f9:61:a1:10:df:e5:
                    d7:36:a9:bf:80:ac:16:8a:83:08:10:c6:16:8b:e7:
                    f8:dd:f3:0f:0a:ed:5b:a5:8a:d4:68:3a:12:0f:b5:
                    9f:19:5f:23:30:02:37:98:62:ea:31:e7:ea:ae:5b:
                    4c:ff:82:f1:3e:7f:4b:cd:bd:be:6e:d7:93:98:3d:
                    2c:03:50:80:c3:1c:4c:18:02:c2:2a:cc:cc:f3:15:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8D:9B:4F:B4:CF:E2:78:A1:EB:9F:A2:03:5A:08:9C:4C:25:68:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.140.0.0/16
                IPv6:
                  2001:67c:134::/48
                  2001:67c:34c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12643

    Signature Algorithm: sha256WithRSAEncryption
         89:57:fd:a5:2e:94:86:1b:b2:10:5d:4b:72:d3:74:b9:95:48:
         7e:55:ff:8a:2f:fb:81:a6:bc:b8:93:b1:c5:4f:11:e9:df:27:
         89:bb:d3:f1:44:96:36:e3:e6:96:70:40:5d:a3:97:05:c5:2f:
         31:5f:65:90:a9:2a:0e:50:cb:61:7b:8f:af:98:87:bf:be:27:
         5d:d3:c8:05:24:81:7f:cd:1e:34:ff:aa:05:16:61:12:5c:3e:
         c2:e9:0e:af:f3:7e:54:57:a3:83:8d:94:cd:9d:dc:88:1b:6c:
         10:3b:6f:85:85:c8:aa:fb:a8:a3:ab:58:93:14:e7:ab:e2:2c:
         80:9f:18:95:72:7d:6e:36:22:29:26:ec:b0:0c:02:7b:89:63:
         de:74:87:af:da:51:28:30:7e:de:df:b9:79:21:7b:fa:89:f0:
         f9:a8:e4:b5:4c:c3:79:47:f4:bf:5b:1f:5d:70:74:bf:a9:6b:
         9b:0f:69:d1:7d:9c:a7:24:52:f4:dd:e8:d7:aa:43:01:b1:ad:
         43:84:90:fa:55:b6:70:56:cb:86:ac:72:83:89:b3:8e:ae:da:
         6b:01:3d:8f:69:a6:62:22:82:57:19:a1:63:29:c9:50:f7:f8:
         60:15:ce:50:1c:62:c8:93:bc:53:2d:88:5c:28:22:f5:46:90:
         17:da:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----