Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
File:                     YUtw_5wi_-C3f0P0HAgHTebzbhs.cer (raw, json)
Hash identifier:          vLPlvYqiy/pMYluggDoo5kYDVQiXoRKGb8p+aejjs+o=
Subject key identifier:   61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D98880DD45D9BB97E98EBBD40E4E7C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57280
                          IP: 109.163.200.0/21
                          IP: 185.60.172.0/22
                          IP: 2a03:5580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:88:80:dd:45:d9:bb:97:e9:8e:bb:d4:0e:4e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:03:ae:48:0b:ef:a6:64:d9:9e:06:20:ba:
                    de:af:d1:06:07:cd:72:24:fd:ad:07:2d:e6:30:b0:
                    2a:99:8e:ba:5e:ca:28:37:4a:08:79:e0:da:17:92:
                    5e:45:d9:79:8a:aa:68:a4:b2:c3:10:ea:fa:bb:f6:
                    c0:a7:c0:a0:2a:c0:f9:60:d3:73:49:f0:ed:37:75:
                    0d:69:e8:93:f8:b6:35:f1:65:93:ba:f8:4f:a7:e6:
                    ea:97:53:c8:b1:44:ae:0b:fb:d0:3f:5b:c4:a7:87:
                    d5:2f:a9:61:ee:8f:26:68:a8:77:40:90:64:a8:61:
                    b9:98:06:f6:0e:dd:55:ff:1b:5b:f5:e7:bc:96:01:
                    94:b9:96:2d:cf:5d:0c:ed:27:d8:30:f8:1c:83:bb:
                    8d:7e:04:c1:59:53:2d:72:a9:02:4c:65:0d:db:a7:
                    74:1b:ef:9d:bb:f4:06:ba:f4:05:f1:ca:ca:63:6c:
                    6e:22:9f:40:e4:6d:4e:c4:9a:01:0a:28:8a:16:6f:
                    78:10:2a:f6:5e:97:8f:cb:40:f7:89:6c:cd:49:34:
                    28:0e:cb:4e:f5:a1:a2:9d:33:6f:0a:4f:77:a8:9a:
                    b4:16:e7:03:4f:7a:67:77:a7:43:ff:59:51:41:54:
                    b7:f8:bb:19:d9:5f:63:7b:4f:98:de:74:e2:fd:94:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.163.200.0/21
                  185.60.172.0/22
                IPv6:
                  2a03:5580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57280

    Signature Algorithm: sha256WithRSAEncryption
         6a:11:dd:0c:5d:e6:07:f4:af:26:51:85:2a:1a:f9:3d:1f:d6:
         40:a3:1b:d6:50:d2:d2:21:6e:1e:7f:ea:63:01:88:e3:5d:35:
         62:0c:fe:06:5e:56:54:92:92:57:e9:a2:04:a5:a8:41:3d:35:
         7b:f1:bd:41:7f:76:f0:b2:78:19:49:49:f4:15:8b:81:35:74:
         9e:d9:b6:b5:1d:27:83:b7:aa:75:bb:98:c6:09:7a:39:e4:b9:
         41:a5:b2:fc:b6:79:6c:8e:31:41:b4:fd:e9:1f:56:fb:ee:c3:
         09:15:30:46:67:43:37:6e:57:00:f9:5a:98:5b:cb:0e:87:c3:
         01:4d:5f:36:20:65:2c:8d:75:6f:70:db:7b:9f:b6:79:96:57:
         a9:d0:d9:9c:06:a5:7f:8a:33:6b:be:9d:3a:6e:df:9f:7e:90:
         36:64:2d:40:44:28:45:16:11:c4:a0:2d:50:9d:de:1c:5a:e4:
         fa:82:c2:07:33:6d:e3:a6:24:50:ba:c5:38:bc:ea:ca:03:94:
         5e:c9:3e:ec:49:dc:24:6e:70:a0:32:f3:6b:da:cf:7a:b1:46:
         81:4a:fc:f3:18:b0:b9:5a:9c:a0:b4:ff:56:ec:b8:05:f7:b4:
         70:74:81:1a:de:21:ff:04:be:dd:04:3b:d3:eb:1f:15:d4:3e:
         74:eb:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----