Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
File:                     Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer (raw, json)
Hash identifier:          SvWCJpBxj2FJwqOs+HGy2HFo9DOO9B5+2HIT/eYLtGU=
Subject key identifier:   63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425215852220AD812425BC270FFFB71B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204393

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:58:52:22:0a:d8:12:42:5b:c2:70:ff:fb:71:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=636b027bfab91aa4719a80efe021246137428bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:92:64:e8:28:3e:81:de:40:3d:d5:38:c4:
                    da:78:94:6d:01:8f:da:bf:38:f7:9f:46:f4:f2:67:
                    03:71:62:e2:d0:a6:cb:de:96:5f:50:5b:d1:46:1b:
                    2f:c9:43:03:20:cc:31:9b:c5:b4:4c:e6:8c:46:15:
                    9a:1a:58:80:a8:a6:68:40:7e:83:35:a3:76:4a:d2:
                    1d:0d:1c:b5:03:5d:ae:b7:54:06:32:58:3d:d2:da:
                    57:37:e6:f6:db:06:30:63:2e:65:b9:12:29:31:ef:
                    b6:3e:48:9d:bf:9e:f6:96:be:f0:db:2f:cc:9c:1a:
                    24:cd:18:57:9a:55:28:0c:e6:f8:e5:7b:ec:6a:c5:
                    51:ad:76:c6:c7:29:bb:ea:0b:12:dc:b2:3b:99:21:
                    00:39:9e:83:78:78:75:55:0d:ec:29:26:62:a3:1a:
                    2c:3f:84:6b:57:86:b8:5b:66:80:2d:83:98:8a:95:
                    a8:22:8d:12:9a:88:d5:51:04:df:96:2e:0e:94:17:
                    3e:32:f2:e9:a9:68:df:14:40:98:d0:18:01:65:a3:
                    2b:9e:17:be:3a:24:5e:00:db:87:1c:b2:ad:21:6f:
                    3c:06:17:cc:97:f9:4a:2b:fd:62:f7:cc:06:4e:72:
                    c4:2d:7d:1c:0a:c2:b9:95:01:46:b8:6f:6b:da:31:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204393

    Signature Algorithm: sha256WithRSAEncryption
         31:14:4e:42:f7:72:01:f7:88:03:f8:cc:75:08:83:8e:cb:24:
         29:dc:de:73:f4:e0:cc:b9:2c:36:e1:94:cc:32:76:78:01:29:
         3b:e1:7c:7b:fd:b6:0a:94:45:b2:b1:27:ad:74:c5:d7:6b:46:
         d1:96:79:c9:4e:03:94:68:e3:29:dd:d1:d4:0f:82:38:5f:7f:
         16:91:c0:c4:ae:e3:2d:3d:44:1b:49:92:55:f3:b0:a9:2c:ab:
         f5:de:f8:a7:4d:73:d6:08:8c:0f:9e:41:d6:a2:cf:eb:7f:5a:
         c7:32:c2:b8:76:8f:1a:41:4f:38:bc:96:dc:de:ba:3b:af:ab:
         15:4f:5d:ed:fe:13:37:94:48:43:93:0a:a3:66:9a:64:8a:28:
         f9:af:2c:c4:c9:df:63:13:06:9f:de:46:93:08:42:ce:39:49:
         9f:55:40:7e:5d:4d:39:d4:7a:47:f4:ad:44:4b:4e:52:57:ce:
         d1:7d:6e:5b:53:4f:43:1f:ec:86:f1:72:a7:4c:a8:46:cc:b4:
         9a:0c:40:9e:ee:6e:15:9f:16:55:7b:9d:2f:43:31:8c:5a:11:
         b5:67:d3:d4:f9:4d:63:b3:16:a3:7f:b5:b2:0f:30:25:bd:fa:
         8c:13:43:14:ff:89:a9:78:9f:49:5f:5c:28:d1:09:4f:3b:b7:
         8e:a2:cd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----