Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
File:                     YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer (raw, json)
Hash identifier:          0GOxiAG3UnVpFLgZJr/bG2Jg+6LcHw2WhuRVh98fF28=
Subject key identifier:   60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDA7EF7130D77BAB317603B5EA4DCC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34426
                          IP: 82.118.160.0/19
                          IP: 89.144.64.0/18
                          IP: 212.102.0.0/19
                          IP: 2a00:1698::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:a7:ef:71:30:d7:7b:ab:31:76:03:b5:ea:4d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=602dc2478a4bdde4c440bb58802410d2340a490e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:e3:08:e4:47:25:f5:43:84:78:c4:44:c4:
                    c8:40:ca:c5:5f:00:e2:9d:a0:6f:e5:b4:e3:3a:ca:
                    fd:70:c5:87:c3:b2:d6:76:73:06:2a:fd:f4:42:c4:
                    21:40:59:80:2f:08:b5:bc:f0:27:a7:24:51:c5:5f:
                    a4:c5:dd:26:fc:42:9c:ec:54:63:0f:dd:32:41:00:
                    ee:c6:76:f2:62:cd:da:19:b8:c6:61:d8:b0:51:91:
                    09:9b:37:ca:d7:c1:b9:55:1a:72:aa:e8:7c:a1:f4:
                    de:ea:a8:42:64:d0:74:a0:3d:ae:05:6c:10:42:7b:
                    c8:a8:be:a7:87:10:2a:3c:79:d7:89:5d:5a:f1:5e:
                    14:2f:59:ff:60:54:c7:34:93:3c:29:07:0e:2d:be:
                    eb:58:88:e2:24:de:c8:75:ff:58:95:14:31:42:69:
                    ed:03:d4:50:3b:1b:53:ef:07:02:82:c1:a6:a6:df:
                    ae:15:57:7b:9c:e2:de:45:11:f8:05:d9:a9:ac:4c:
                    13:30:c7:36:56:81:06:96:38:70:68:11:13:2b:3f:
                    58:7c:98:ea:32:cb:1d:8c:1e:e8:19:5e:7f:1b:cd:
                    fd:af:34:08:ce:b5:6c:d9:03:5f:92:f1:a2:f8:ca:
                    9f:49:7d:92:c2:bc:c4:bc:c3:4e:dc:d1:31:a0:d0:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.160.0/19
                  89.144.64.0/18
                  212.102.0.0/19
                IPv6:
                  2a00:1698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34426

    Signature Algorithm: sha256WithRSAEncryption
         15:48:45:3e:a7:a1:b0:4a:ad:2d:34:65:f1:82:6e:56:ce:d0:
         d9:ce:de:26:92:1f:46:b0:58:c0:d9:23:5b:09:09:60:fc:49:
         93:3c:3e:89:d1:66:ff:e6:f3:39:5c:18:b6:99:65:b1:7e:7b:
         1e:a3:1c:ce:6d:17:d6:aa:34:76:51:02:5d:aa:1d:7e:41:62:
         d7:ae:42:df:6d:44:94:3c:43:8a:29:a5:05:50:f5:30:0a:8f:
         e7:b2:c2:a2:20:d5:af:a7:bb:24:10:46:6e:d1:58:32:eb:69:
         85:26:a0:c4:6b:46:f4:1a:23:23:d4:1d:66:bc:b8:b8:80:e0:
         c0:08:ca:2d:d2:2d:55:86:7e:ad:ed:5e:ed:c1:04:12:56:53:
         a0:8a:bf:90:e8:66:0d:2f:48:7b:b9:c6:d3:58:d0:96:86:9b:
         80:21:28:7f:09:fb:35:a6:f7:7e:0d:f7:6d:bb:e4:2a:76:4f:
         6f:a6:16:9e:f9:f7:4c:b3:f8:07:c9:0f:a2:43:86:d8:de:a6:
         e5:49:c6:3c:35:ca:23:a0:0c:85:cb:c0:18:4d:bb:65:8f:08:
         ac:55:82:2a:6e:21:66:d0:f2:6c:80:16:5b:2b:ec:d2:45:5a:
         02:f5:b7:f8:a8:8d:8a:bc:1c:6e:d1:bc:78:7d:ca:06:8b:02:
         02:47:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----