Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
File:                     Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer (raw, json)
Hash identifier:          GVBMis+PknomJpCrAQ8WcbqKZgFQ4Ck7Qie5/y9kDHM=
Subject key identifier:   3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7462FA0175F4C435E999C2D86138E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47798
                          IP: 94.124.216.0/21
                          IP: 109.203.224.0/19
                          IP: 2a02:ccc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:46:2f:a0:17:5f:4c:43:5e:99:9c:2d:86:13:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:a0:26:9c:9f:af:e8:b7:5a:0a:90:ab:74:
                    52:78:67:5c:26:2b:c5:c8:6d:f7:61:40:d8:69:0e:
                    52:cf:59:2a:51:2f:e0:74:19:ab:b2:d1:7c:71:4c:
                    8e:ed:ba:df:0b:51:9c:ab:33:07:a5:5b:fd:15:5d:
                    b7:4f:9b:a1:17:8a:94:d5:43:dd:f7:55:44:72:4a:
                    61:d0:24:20:01:7d:3f:12:0b:db:f8:5c:c9:e1:29:
                    db:77:9f:71:ec:5e:2f:a0:7c:a8:4d:7d:9e:b9:f0:
                    7f:65:66:33:9b:fc:1b:11:ca:96:de:ff:33:f1:f0:
                    1d:3c:61:77:83:b9:56:91:59:be:3d:b4:37:77:dc:
                    9f:fb:9a:b2:9f:16:d6:62:24:89:e2:98:29:55:fa:
                    bb:99:13:da:3a:89:ae:aa:0c:dc:4f:45:01:f5:8a:
                    99:01:e7:4f:47:05:40:c9:28:99:b5:50:84:90:d1:
                    35:c6:23:43:bd:36:12:d6:d1:53:55:33:46:96:b4:
                    21:c3:1f:c9:f8:8d:c9:c8:02:e0:47:fc:03:ef:2b:
                    07:8c:ca:17:89:99:61:aa:8f:9f:d8:ba:25:33:69:
                    48:e8:94:8a:5b:74:43:f8:cd:c2:a7:50:49:52:b1:
                    2d:c3:48:be:ba:ba:25:cf:64:84:f8:eb:a7:10:8d:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.216.0/21
                  109.203.224.0/19
                IPv6:
                  2a02:ccc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47798

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:61:ae:69:25:d4:8d:a5:14:51:b9:d5:e0:3e:52:ce:b9:
         71:bb:c1:e5:82:06:31:cc:08:02:75:17:0f:d1:a7:ab:14:0b:
         6f:62:e4:83:8d:b4:33:c6:87:10:5d:15:8f:5e:02:28:3c:39:
         bf:9d:9e:65:94:76:30:5b:59:a4:11:d2:e4:16:2a:b7:0a:68:
         80:21:5f:f7:ca:d6:c0:01:d9:01:99:7d:db:88:74:95:1e:bc:
         ee:6b:cb:8e:b4:1d:61:04:fa:0c:c1:46:44:bf:9e:cc:db:c2:
         4d:b7:2b:69:25:7a:ec:ec:1d:75:e7:f0:5a:64:72:e9:cf:43:
         47:b0:77:3b:2a:d5:24:06:d6:d6:00:26:82:0f:d0:aa:76:dd:
         32:52:11:c4:a0:41:6d:fa:54:63:9c:9e:50:a7:61:38:d8:0c:
         9b:43:2b:45:ab:85:8c:3c:c4:ad:22:97:9b:8f:4d:8c:71:86:
         cc:df:76:4b:0d:ca:9b:07:c3:f0:51:19:2c:57:35:74:24:a0:
         1c:13:f7:cf:8f:08:c6:d3:6c:34:63:93:34:05:eb:d2:40:20:
         aa:4b:0e:d8:ff:62:22:3e:34:f1:f3:0e:c9:64:bd:64:1c:85:
         e4:a1:13:9b:e1:ac:83:06:e3:0c:a4:93:67:f7:b1:0d:b3:66:
         71:71:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----