Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
File:                     Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer (raw, json)
Hash identifier:          kfAIETofbQc2YBdBNdbZihC0nnITkGzWHBNOwqvQV+w=
Subject key identifier:   63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942369A4F06CB1B65295957D682E02FC45
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215770
                          IP: 91.238.217.0/24
                          IP: 2a14:6280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:a4:f0:6c:b1:b6:52:95:95:7d:68:2e:02:fc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:99:23:40:16:45:d8:18:0d:b1:8d:de:41:
                    f9:b8:bb:64:9f:70:8f:fd:e2:ee:ea:5c:8c:39:ae:
                    04:cb:7f:9e:fc:df:81:ec:ad:f0:48:30:fa:4c:6a:
                    15:b0:74:48:2c:8f:22:44:28:c8:a3:93:31:e7:76:
                    bd:f1:19:11:31:98:24:14:f9:07:42:6d:e9:8a:6c:
                    f0:3b:57:b4:3e:60:34:17:b1:9f:7f:62:ad:62:52:
                    1e:1c:5b:6a:e0:79:bd:4b:08:e4:c7:88:44:03:63:
                    82:b5:b4:71:b3:d4:0f:80:e6:83:08:cc:77:3a:9e:
                    9d:2d:d2:bf:83:ed:cd:01:49:4a:16:1a:a4:3e:d6:
                    18:43:cd:65:0e:25:ac:99:89:7b:05:b4:66:45:6d:
                    87:a4:bc:24:e6:e8:9d:3b:83:aa:42:5d:98:a1:10:
                    ac:87:f6:8c:06:5c:54:01:f8:8d:bf:fe:24:64:da:
                    b9:30:76:2c:9f:f8:85:e9:fc:51:8a:7e:2c:22:05:
                    14:e7:f8:a2:d8:2a:46:ca:7b:67:33:9a:0d:5f:0f:
                    5e:e5:28:fc:45:87:81:f4:37:e0:46:b3:5b:82:b7:
                    21:84:7b:aa:76:1c:92:12:2c:b2:ba:c7:59:8d:a2:
                    ad:9d:21:7d:db:66:c0:ee:ae:73:9c:9f:69:fd:9f:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.217.0/24
                IPv6:
                  2a14:6280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215770

    Signature Algorithm: sha256WithRSAEncryption
         97:57:5d:cc:e1:17:c4:e9:7a:5b:ee:35:22:c9:50:d7:d9:62:
         91:5f:86:c0:cb:b3:8c:bf:12:ad:58:c6:43:59:ef:3d:93:d2:
         59:79:c3:e4:b8:55:ac:2a:5d:2f:16:90:ef:62:bd:6d:82:c2:
         b6:40:55:98:bd:87:fe:24:ff:ab:6a:5f:c8:9c:14:0b:d0:b0:
         86:a1:d3:ec:17:f7:bd:1c:8b:61:62:22:a9:23:04:0a:38:90:
         cb:02:5a:d3:aa:32:67:b4:bb:81:ba:fb:88:b0:74:84:2d:f4:
         8c:19:dd:a0:f6:48:9e:a9:a6:8c:bc:51:dd:ef:3f:bf:97:a7:
         ca:75:c6:89:0d:60:50:a8:96:27:fd:29:d6:36:09:31:ee:b9:
         4c:ed:98:ef:54:c1:27:34:ae:be:04:17:35:d8:f4:78:d5:4b:
         4d:1b:2b:57:35:d1:d8:76:c6:58:35:88:6c:da:3b:dc:5c:83:
         99:f8:d5:1c:de:20:40:64:ec:0a:23:20:aa:31:8a:88:eb:1d:
         8b:6b:c0:b5:3f:57:dd:aa:07:e4:81:68:db:c7:1a:8f:7f:12:
         39:e0:ae:39:1f:38:eb:77:a9:37:61:8c:dd:bf:cd:cc:fd:21:
         28:6b:38:ca:2b:c3:d9:80:d8:03:bf:5b:06:c4:24:64:dc:b5:
         ba:cb:30:86
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQjaaTwbLG2UpWVfWguAvxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2I1MDcyYTA3MDEyMjFlMWQyOTFmMDJkZWI4Y2Q1MTY5ZTZhYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBaZI0AWRdgYDbGN3kH5uLtkn3CP
/eLu6lyMOa4Ey3+e/N+B7K3wSDD6TGoVsHRILI8iRCjIo5Mx53a98RkRMZgkFPkH
Qm3pimzwO1e0PmA0F7Gff2KtYlIeHFtq4Hm9Swjkx4hEA2OCtbRxs9QPgOaDCMx3
Op6dLdK/g+3NAUlKFhqkPtYYQ81lDiWsmYl7BbRmRW2HpLwk5uidO4OqQl2YoRCs
h/aMBlxUAfiNv/4kZNq5MHYsn/iF6fxRin4sIgUU5/ii2CpGyntnM5oNXw9e5Sj8
RYeB9DfgRrNbgrchhHuqdhySEiyyusdZjaKtnSF922bA7q5znJ9p/Z8HwwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGO1ByoHASIeHSkfAt64zVFp5qwyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2ZjOGNi
NC1jZTg0LTQzZTQtYWEyYS1mMzkxZGMxMTdmZTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZmM4Y2I0
LWNlODQtNDNlNC1hYTJhLWYzOTFkYzExN2ZlOS8xL1k3VUhLZ2NCSWg0ZEtSOEMz
cmpOVVdubXJESS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW+7ZMA0EAgACMAcDBQMqFGKAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNK2jANBgkqhkiG9w0BAQsFAAOCAQEAl1ddzOEXxOl6
W+41IslQ19likV+GwMuzjL8SrVjGQ1nvPZPSWXnD5LhVrCpdLxaQ72K9bYLCtkBV
mL2H/iT/q2pfyJwUC9CwhqHT7Bf3vRyLYWIiqSMECjiQywJa06oyZ7S7gbr7iLB0
hC30jBndoPZInqmmjLxR3e8/v5enynXGiQ1gUKiWJ/0p1jYJMe65TO2Y71TBJzSu
vgQXNdj0eNVLTRsrVzXR2HbGWDWIbNo73FyDmfjVHN4gQGTsCiMgqjGKiOsdi2vA
tT9X3aoH5IFo28caj38SOeCuOR8463epN2GM3b/NzP0hKGs4yivD2YDYA79bBsQk
ZNy1usswhg==
-----END CERTIFICATE-----