Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
File:                     YB3AD5pIG0FQhrFDp91M2h_7JHA.cer (raw, json)
Hash identifier:          3VekgUNDqrVS1FtQZgyyxx/8PYL25YnwS38PJAgQO1c=
Subject key identifier:   60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FBF3981AFD3F52C556357FD387AD1A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57354
                          IP: 91.231.218.0/23
                          IP: 185.228.132.0/22
                          IP: 2a0d:1600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fb:f3:98:1a:fd:3f:52:c5:56:35:7f:d3:87:ad:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:85:c0:d9:5a:f0:98:02:9a:31:24:f8:d4:
                    cd:54:32:c9:8b:b0:92:1f:6b:c8:cf:10:5e:cd:f3:
                    e0:77:e9:8c:20:67:98:1e:6f:a9:b8:f1:0f:8c:e6:
                    c5:2a:1f:50:36:0b:0b:a7:f6:35:fc:83:a1:0f:da:
                    06:cb:26:aa:e0:36:10:0f:95:14:11:46:2f:1d:ea:
                    f8:0b:05:49:6e:bb:26:83:e6:b2:90:79:2a:fd:2c:
                    e1:6e:8b:2e:2b:3e:80:8a:6a:04:8c:a0:a3:f3:49:
                    cb:bc:4b:cc:ff:bf:c9:0c:03:81:c7:e5:0c:94:f7:
                    81:e8:83:d9:16:20:c9:0b:64:31:d0:60:0b:e6:1a:
                    11:b3:77:58:4e:ca:fa:8b:4e:b9:6f:23:89:ea:4b:
                    d5:13:b5:c1:68:e2:aa:a2:28:34:66:3b:32:33:a0:
                    1d:5a:08:49:55:fe:38:31:0e:4b:7f:45:6e:a7:4e:
                    2a:18:22:b9:1e:cc:54:16:9a:13:47:78:75:a1:8a:
                    85:e0:6a:a3:fc:b6:95:b5:7d:f3:c6:a0:1f:b1:93:
                    50:60:36:3b:0c:7a:10:c1:74:71:93:51:78:ce:d7:
                    57:1c:7d:34:7d:7a:3c:ed:40:ea:40:d7:fe:04:75:
                    68:95:c9:6b:42:16:21:e8:68:f1:d0:d8:01:4d:81:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.218.0/23
                  185.228.132.0/22
                IPv6:
                  2a0d:1600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57354

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:7a:47:9e:ff:bd:22:22:43:b6:8e:5b:1b:5d:52:40:0b:
         01:92:9c:29:90:10:78:38:30:d5:74:f6:2e:a0:25:40:71:7c:
         46:25:bb:ed:e0:36:ec:2f:60:64:18:21:e8:cc:43:0e:7c:cf:
         d0:2a:54:57:91:82:76:94:ea:44:7f:fa:ba:f0:e3:ba:43:e8:
         a0:03:f6:3a:72:26:60:99:7d:b0:93:e8:7c:40:cb:94:dd:b7:
         ea:18:7b:61:38:76:35:a0:d2:97:15:9d:28:0c:00:eb:ee:94:
         b1:7b:45:2b:54:b8:57:ab:d8:cd:03:5d:3b:b2:f5:b6:17:95:
         04:9c:1e:87:a2:6c:01:82:69:82:1b:f0:fb:73:50:19:cd:ea:
         97:0b:28:e4:6a:d4:69:8d:de:b1:f5:f9:2b:54:82:41:81:e4:
         ce:33:fd:4a:2f:0b:48:86:56:07:65:9c:53:19:d5:2b:f4:d3:
         f6:fa:66:e5:8d:5e:63:9b:88:25:6b:83:17:d2:16:30:2b:8a:
         6d:3a:da:81:11:d3:bd:e9:4f:3e:71:e5:9b:40:a2:24:99:d6:
         b5:c7:07:39:a1:af:77:f5:a4:4f:0a:36:f4:7e:49:d6:b0:6d:
         c5:43:9a:9b:8c:0e:23:e5:a8:f1:3b:33:3b:1f:3a:6b:cf:9d:
         73:c4:3b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----