Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
File:                     Y3A8pQxDKs1_HLunwH2iICKZymM.cer (raw, json)
Hash identifier:          dje1GS6NcZ6eROuPmN7r99iTfG1sBGxsdIMUFwT/Ng4=
Subject key identifier:   63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D8EDF537C760F3E2A472BB2A977A27
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:48:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212408
                          IP: 193.3.233.0/24
                          IP: 2a10:e200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:ed:f5:37:c7:60:f3:e2:a4:72:bb:2a:97:7a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:48:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:10:40:74:c5:27:ee:39:97:4e:61:4d:d2:
                    eb:8e:1a:62:c2:99:9c:75:0e:ae:2a:bd:0e:f5:29:
                    36:b5:9b:60:21:ad:39:3a:10:87:20:71:b5:13:73:
                    ea:98:9c:43:69:e2:1d:c1:d1:97:2c:4d:bd:9d:fd:
                    1b:d9:e9:88:4a:53:1b:37:98:ed:48:dd:5b:0f:0d:
                    0f:17:ce:53:c4:dc:ea:9f:7e:b8:3e:2d:4b:2e:a0:
                    f8:5d:ae:f1:a4:2c:95:b0:52:7f:3c:d0:fe:b1:f2:
                    ed:12:d4:42:15:65:a4:37:25:0c:a8:04:6f:5b:d6:
                    02:51:15:bd:97:71:af:8e:a5:e2:29:14:5f:c0:9d:
                    f7:98:97:f1:71:12:11:89:0a:5f:3a:a0:21:f9:80:
                    27:ea:df:85:2c:4d:2c:ea:f5:e0:10:3a:8b:fd:96:
                    4e:44:49:0b:70:2a:0b:bb:dd:bd:01:48:4a:63:10:
                    02:e7:f8:be:d2:de:e4:9a:4e:fb:20:b2:df:51:0e:
                    d0:6a:d2:bd:66:33:21:ed:ee:8d:b2:f1:df:40:12:
                    79:fd:ca:58:0b:aa:9a:11:85:2c:0d:a2:bc:1f:8c:
                    23:3d:bd:a1:23:99:b7:78:1b:0f:a6:84:86:40:29:
                    5a:ed:1a:20:1c:a3:2a:e5:3b:51:76:7f:a9:36:33:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.233.0/24
                IPv6:
                  2a10:e200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212408

    Signature Algorithm: sha256WithRSAEncryption
         22:50:2f:6a:4c:e6:38:f1:86:11:89:25:e4:72:cf:9a:3d:10:
         7d:b0:48:44:56:6e:47:b5:a9:38:a6:6b:1d:9e:68:6b:a9:a4:
         3b:2a:d9:44:88:a8:e1:73:b3:52:b3:13:8e:24:16:fe:aa:47:
         5d:b7:51:0b:48:73:51:f3:a9:be:9e:a2:ff:7e:4e:d7:73:a5:
         03:53:53:8a:df:4a:be:fa:78:81:11:16:d4:ba:de:86:10:93:
         31:36:2b:f4:5f:d4:48:41:76:aa:5f:1f:27:cc:f3:be:fc:5e:
         0e:55:66:e9:e7:49:51:7b:07:14:af:b5:fb:94:20:75:bc:ba:
         cd:a2:a8:4f:24:a9:6e:e1:ba:97:b1:43:4c:6d:5b:00:26:ec:
         72:1b:33:b1:5f:7e:5f:97:13:04:50:da:31:1e:c0:d4:a3:6f:
         23:53:53:89:2b:ca:64:00:38:11:4f:59:34:b7:d0:ca:71:64:
         33:43:83:51:ed:05:3a:15:c1:a1:7a:8d:fa:ae:10:ec:8a:a7:
         ee:40:ab:3a:86:4b:76:00:9c:70:96:cd:21:72:80:33:fb:9a:
         0b:93:06:75:6f:c3:5a:9a:7c:39:84:70:52:4a:f1:c4:30:29:
         3c:eb:9f:72:d6:5c:7a:8b:d2:32:03:fc:37:6d:d3:c3:4a:64:
         43:71:bb:3b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2O31N8dg8+Kkcrsql3onMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzcwM2NhNTBjNDMyYWNkN2YxY2JiYTdjMDdkYTIyMDIyOTljYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xAQQHTFJ+45l05hTdLrjhpiwpmc
dQ6uKr0O9Sk2tZtgIa05OhCHIHG1E3PqmJxDaeIdwdGXLE29nf0b2emISlMbN5jt
SN1bDw0PF85TxNzqn364Pi1LLqD4Xa7xpCyVsFJ/PND+sfLtEtRCFWWkNyUMqARv
W9YCURW9l3GvjqXiKRRfwJ33mJfxcRIRiQpfOqAh+YAn6t+FLE0s6vXgEDqL/ZZO
REkLcCoLu929AUhKYxAC5/i+0t7kmk77ILLfUQ7QatK9ZjMh7e6NsvHfQBJ5/cpY
C6qaEYUsDaK8H4wjPb2hI5m3eBsPpoSGQCla7RogHKMq5TtRdn+pNjNJVQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGNwPKUMQyrNfxy7p8B9oiAimcpjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2FmMzM0
YS1mOWIzLTQxOWQtYjU5MC1mYjBmYjFjMDZjNzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYWYzMzRh
LWY5YjMtNDE5ZC1iNTkwLWZiMGZiMWMwNmM3NC8xL1kzQThwUXhES3MxX0hMdW53
SDJpSUNLWnltTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwQPpMA0EAgACMAcDBQAqEOIAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM9uDANBgkqhkiG9w0BAQsFAAOCAQEAIlAvakzmOPGG
EYkl5HLPmj0QfbBIRFZuR7WpOKZrHZ5oa6mkOyrZRIio4XOzUrMTjiQW/qpHXbdR
C0hzUfOpvp6i/35O13OlA1NTit9Kvvp4gREW1LrehhCTMTYr9F/USEF2ql8fJ8zz
vvxeDlVm6edJUXsHFK+1+5Qgdby6zaKoTySpbuG6l7FDTG1bACbschszsV9+X5cT
BFDaMR7A1KNvI1NTiSvKZAA4EU9ZNLfQynFkM0ODUe0FOhXBoXqN+q4Q7Iqn7kCr
OoZLdgCccJbNIXKAM/uaC5MGdW/DWpp8OYRwUkrxxDApPOufctZceovSMgP8N23T
w0pkQ3G7Ow==
-----END CERTIFICATE-----