Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
File:                     YbGV0TBQ_zxGihSXeHELU1giUdk.cer (raw, json)
Hash identifier:          ol+6VMJrRYIJM5B4u0kpRw03J431ogouQcBg3YyCvqs=
Subject key identifier:   61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5190FC3146B31CB30AE392DB19A5B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 15925
                          IP: 87.253.248.0/21
                          IP: 213.135.192.0/19
                          IP: 2a01:7f8::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:19:0f:c3:14:6b:31:cb:30:ae:39:2d:b1:9a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=61b195d13050ff3c468a149778710b53582251d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f6:7b:dc:5c:0d:41:bc:ec:3c:85:82:bb:3d:
                    08:8f:36:8e:78:1f:ab:e1:0c:d1:35:09:ac:d2:27:
                    48:4d:53:05:c7:a7:bd:52:9f:f5:32:81:58:59:c0:
                    6c:3a:b6:0a:91:03:03:46:9f:44:5f:c2:6b:f2:0c:
                    fb:10:cd:e7:ae:8c:18:ff:eb:89:d6:a3:9a:38:92:
                    9f:c8:e2:04:91:77:ae:d6:87:9b:d7:f4:dd:4a:e6:
                    4f:14:42:01:e5:a3:78:ea:85:73:be:50:0d:ab:7c:
                    f9:97:12:97:15:d3:69:fc:df:4d:31:c0:8a:ce:64:
                    ba:97:5d:ae:9c:ab:aa:2e:c9:94:ae:7c:97:32:b2:
                    bf:ef:8a:0e:cf:8f:5c:f0:c5:95:b2:86:00:0b:48:
                    6e:9e:31:b8:42:ab:36:f1:31:a9:a8:31:41:55:f4:
                    6d:aa:88:f8:fb:76:cb:cb:c5:9b:77:2a:2d:1b:de:
                    3f:59:b9:5a:00:9c:79:43:a4:fe:5d:b5:85:f5:84:
                    45:e2:a3:b5:0b:c5:66:d5:4b:75:a9:4a:17:af:36:
                    35:26:5f:57:7e:20:ed:b1:12:ec:eb:2e:8d:52:43:
                    d0:70:eb:e8:ad:b1:39:de:e5:09:34:cb:fa:ff:08:
                    76:32:37:76:23:ce:b0:a1:d3:99:48:7f:3c:08:6e:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.253.248.0/21
                  213.135.192.0/19
                IPv6:
                  2a01:7f8::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15925

    Signature Algorithm: sha256WithRSAEncryption
         44:a5:29:68:06:eb:8a:45:36:d8:c6:6f:94:8c:1b:7c:48:4f:
         29:af:91:01:8e:ac:51:c0:9f:e1:ed:89:1d:89:3e:75:d7:02:
         e8:79:7e:c0:37:cf:c4:af:84:17:20:81:a5:c5:59:cc:09:a9:
         f8:58:2d:b2:33:5e:62:f1:57:eb:74:9f:26:4d:dd:70:5e:97:
         6f:e6:24:b2:2d:97:cd:53:1d:b1:42:cf:ac:f4:0c:53:13:d1:
         95:56:19:4e:3e:ff:fb:38:0d:8d:20:5a:68:e7:1f:4d:1a:0d:
         1b:9c:ad:c7:4f:6a:cf:cd:e2:2d:93:ef:f1:5f:5f:76:f1:c3:
         58:a7:cf:9e:58:d5:42:ad:ef:9a:6a:9a:eb:1d:59:58:68:e0:
         fc:c1:26:36:84:04:2f:c2:c7:17:01:7b:b5:e0:f3:ea:39:1f:
         b9:c2:3f:f8:d2:eb:a1:c9:57:f6:19:48:c3:a8:87:52:5b:d0:
         e7:7d:4e:fc:92:6f:43:62:f1:48:6f:fe:b1:23:8c:7d:15:3b:
         4c:2d:5c:68:29:8c:de:3d:78:4e:89:31:39:63:a8:37:32:cb:
         37:62:ff:7d:02:09:c1:6f:c0:31:b8:c5:9e:95:7b:53:c6:e5:
         98:08:e7:c2:d4:3b:1c:0d:6b:1d:29:16:43:39:39:5f:e7:b3:
         45:b6:73:a0
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZQntRkPwxRrMcswrjktsZpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWIxOTVkMTMwNTBmZjNjNDY4YTE0OTc3ODcxMGI1MzU4MjI1MWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfZ73FwNQbzsPIWCuz0IjzaOeB+r
4QzRNQms0idITVMFx6e9Up/1MoFYWcBsOrYKkQMDRp9EX8Jr8gz7EM3nrowY/+uJ
1qOaOJKfyOIEkXeu1oeb1/TdSuZPFEIB5aN46oVzvlANq3z5lxKXFdNp/N9NMcCK
zmS6l12unKuqLsmUrnyXMrK/74oOz49c8MWVsoYAC0hunjG4Qqs28TGpqDFBVfRt
qoj4+3bLy8WbdyotG94/WblaAJx5Q6T+XbWF9YRF4qO1C8Vm1Ut1qUoXrzY1Jl9X
fiDtsRLs6y6NUkPQcOvorbE53uUJNMv6/wh2Mjd2I86wodOZSH88CG6ZXQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFGGxldEwUP88RooUl3hxC1NYIlHZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzJmM2Mx
OS01NmQ1LTQ5MjQtOGJjYi1iYWM0NzJhYjdiNmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMmYzYzE5
LTU2ZDUtNDkyNC04YmNiLWJhYzQ3MmFiN2I2YS8xL1liR1YwVEJRX3p4R2loU1hl
SEVMVTFnaVVkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDV/34AwQF1YfAMA0EAgACMAcDBQMqAQf4MBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAj41MA0GCSqGSIb3DQEBCwUAA4IBAQBEpSlo
BuuKRTbYxm+UjBt8SE8pr5EBjqxRwJ/h7YkdiT511wLoeX7AN8/Er4QXIIGlxVnM
Can4WC2yM15i8VfrdJ8mTd1wXpdv5iSyLZfNUx2xQs+s9AxTE9GVVhlOPv/7OA2N
IFpo5x9NGg0bnK3HT2rPzeItk+/xX1928cNYp8+eWNVCre+aaprrHVlYaOD8wSY2
hAQvwscXAXu14PPqOR+5wj/40uuhyVf2GUjDqIdSW9DnfU78km9DYvFIb/6xI4x9
FTtMLVxoKYzePXhOiTE5Y6g3Mss3Yv99AgnBb8AxuMWelXtTxuWYCOfC1DscDWsd
KRZDOTlf57NFtnOg
-----END CERTIFICATE-----