Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
File:                     YcGgEMsk-ZbneJixJHJbVbY0OOA.cer (raw, json)
Hash identifier:          YloQPG4dmkm+pZf91CujXrexqLN3zSxjoQclaUZOLQM=
Subject key identifier:   61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9196CAD9E873EAFE630C5D1B1B4F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200948
                          IP: 185.190.200.0/22
                          IP: 2a0a:f40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:19:6c:ad:9e:87:3e:af:e6:30:c5:d1:b1:b4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=61c1a010cb24f996e77898b124725b55b63438e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a1:2b:43:84:19:15:e3:90:43:e8:d5:0f:68:
                    b4:e9:45:78:aa:71:c5:79:47:99:1a:3b:97:02:48:
                    78:82:3a:4c:2d:19:d9:ad:1b:7d:eb:12:f2:35:6a:
                    f8:d3:8a:a5:f8:db:43:fa:f4:4e:78:1c:b8:ad:e2:
                    40:05:17:bb:5c:18:6d:75:8b:a6:8f:03:48:e3:fd:
                    de:8a:ea:c0:c8:d8:84:b9:c8:d8:ea:5f:96:9c:18:
                    93:83:8b:0f:b5:cb:7e:d2:4a:a0:f5:82:5e:2a:32:
                    ca:ab:51:03:cf:7c:99:d8:09:79:1c:f4:3b:95:31:
                    ea:ff:45:ce:28:52:0a:85:60:64:b7:d7:87:78:c8:
                    c8:b8:ad:8e:d1:a9:6f:76:2f:90:14:1a:04:71:9f:
                    62:19:40:9e:96:89:23:51:7b:bd:99:b9:46:bf:ec:
                    b5:ba:da:97:07:12:41:87:c0:d1:e2:1e:c8:1f:f4:
                    0f:14:e3:03:a6:66:4e:f7:6c:3a:54:8b:c7:78:d5:
                    97:c1:c4:5b:fd:3b:ca:9a:4f:d7:e9:92:c9:a0:13:
                    e8:a0:12:e2:59:cc:e7:14:42:77:05:37:d6:10:9b:
                    db:36:b9:19:c6:59:f6:51:12:f6:d9:01:27:b4:d3:
                    6b:e3:bc:e4:92:10:2d:f9:12:98:04:bc:73:e4:7c:
                    1d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.200.0/22
                IPv6:
                  2a0a:f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200948

    Signature Algorithm: sha256WithRSAEncryption
         42:89:46:98:8d:c9:24:42:bf:df:5c:ba:cf:e3:6d:a9:87:26:
         f5:db:66:a8:24:fe:c6:b6:3f:3e:de:0c:a8:f0:2f:d0:f2:62:
         c6:0b:fd:f6:8a:7b:49:65:51:2d:5b:a1:04:9f:10:0e:38:e1:
         55:0a:56:a7:f7:9e:34:b2:b2:29:e0:20:a3:a5:90:a7:9d:28:
         6f:92:2d:56:e8:e3:88:f0:e7:2a:a7:88:39:02:cc:f3:79:ff:
         74:b1:d1:db:ab:65:93:ce:e0:b1:36:22:b5:fb:21:1a:5c:2f:
         b8:c9:48:b6:6f:33:7c:c3:87:52:55:c3:d6:d4:45:cc:58:f2:
         2f:d6:6c:55:d8:2f:40:48:09:5b:f5:21:36:b4:af:c3:d3:7d:
         a2:00:f2:ff:74:82:99:07:18:69:09:c5:0e:a7:de:3e:38:be:
         72:0b:8f:ce:88:60:9c:83:58:5a:48:71:37:e8:b8:9f:21:45:
         a5:15:47:d6:da:73:d2:35:0a:8d:e4:e0:43:0e:ae:c3:b8:78:
         49:eb:ff:86:83:5d:3b:5b:32:1c:41:a6:d8:52:0c:42:75:16:
         d9:67:52:d1:6d:6c:50:14:20:4d:2b:86:89:01:57:3b:92:b7:
         a6:33:d3:bb:a4:48:63:48:a4:3c:d3:fc:96:25:b2:6a:fa:59:
         74:43:62:fa
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2RlsrZ6HPq/mMMXRsbTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWMxYTAxMGNiMjRmOTk2ZTc3ODk4YjEyNDcyNWI1NWI2MzQzOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qErQ4QZFeOQQ+jVD2i06UV4qnHF
eUeZGjuXAkh4gjpMLRnZrRt96xLyNWr404ql+NtD+vROeBy4reJABRe7XBhtdYum
jwNI4/3eiurAyNiEucjY6l+WnBiTg4sPtct+0kqg9YJeKjLKq1EDz3yZ2Al5HPQ7
lTHq/0XOKFIKhWBkt9eHeMjIuK2O0alvdi+QFBoEcZ9iGUCelokjUXu9mblGv+y1
utqXBxJBh8DR4h7IH/QPFOMDpmZO92w6VIvHeNWXwcRb/TvKmk/X6ZLJoBPooBLi
WcznFEJ3BTfWEJvbNrkZxln2URL22QEntNNr47zkkhAt+RKYBLxz5HwdfwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGHBoBDLJPmW53iYsSRyW1W2NDjgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzMzYzFj
MC00Y2I4LTQ0YjktYTNlOS1lOWU5OTM3YjhkY2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMzNjMWMw
LTRjYjgtNDRiOS1hM2U5LWU5ZTk5MzdiOGRjZS8xL1ljR2dFTXNrLVpibmVKaXhK
SEpiVmJZME9PQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCub7IMA0EAgACMAcDBQAqCg9AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQ9DANBgkqhkiG9w0BAQsFAAOCAQEAQolGmI3JJEK/
31y6z+NtqYcm9dtmqCT+xrY/Pt4MqPAv0PJixgv99op7SWVRLVuhBJ8QDjjhVQpW
p/eeNLKyKeAgo6WQp50ob5ItVujjiPDnKqeIOQLM83n/dLHR26tlk87gsTYitfsh
GlwvuMlItm8zfMOHUlXD1tRFzFjyL9ZsVdgvQEgJW/UhNrSvw9N9ogDy/3SCmQcY
aQnFDqfePji+cguPzohgnINYWkhxN+i4nyFFpRVH1tpz0jUKjeTgQw6uw7h4Sev/
hoNdO1syHEGm2FIMQnUW2WdS0W1sUBQgTSuGiQFXO5K3pjPTu6RIY0ikPNP8liWy
avpZdENi+g==
-----END CERTIFICATE-----