Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
File:                     Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer (raw, json)
Hash identifier:          OQ1ww+9+HqFa4BQ+xKrpHB0SaL5ipuxGmBd0gdI7j+E=
Subject key identifier:   62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B69AA814C548F6854ABE4EDBF78160
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:51:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 196956
                          IP: 109.71.232.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:9a:a8:14:c5:48:f6:85:4a:be:4e:db:f7:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:51:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=62cbfa24a488327b730775e329d51a1921612531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:58:2b:76:b0:80:2b:cd:cd:ff:bf:94:62:
                    6d:a2:de:32:fb:f3:fb:60:d8:4e:af:a1:d7:88:58:
                    70:36:a1:39:9e:36:49:1b:56:7b:33:59:b3:0f:27:
                    47:86:39:17:65:a7:ed:fc:16:a7:3f:1d:ef:b5:de:
                    80:fe:65:8a:90:74:8f:62:be:08:b3:c9:23:4c:32:
                    47:e1:42:b2:5c:bc:d6:89:20:03:a2:75:de:74:90:
                    76:c4:b6:2f:8a:5f:01:45:70:d1:e8:1b:88:eb:1d:
                    1b:85:5d:5d:2b:06:85:9b:53:1c:9a:81:e4:4b:d9:
                    33:c7:99:4f:7d:63:9d:7a:25:81:a3:d1:07:1b:ed:
                    ed:6c:a6:58:de:06:15:76:93:5a:f2:6f:9d:83:59:
                    c6:9d:65:a9:98:14:9a:74:b2:ce:1f:d2:17:d8:0d:
                    74:30:2e:d9:ee:59:29:a3:7e:63:e5:3e:15:15:65:
                    73:65:e2:4b:0b:82:69:95:3d:f1:89:fa:4d:ba:16:
                    79:cd:c3:5a:c6:6f:94:e2:ca:f1:d5:f4:f3:96:d4:
                    62:e2:60:e2:f3:eb:da:72:51:78:36:2b:2f:66:34:
                    29:ee:20:fd:7a:28:07:91:b4:b2:44:a0:b5:1f:03:
                    18:24:f5:36:95:0a:74:d8:9d:71:d5:15:09:27:5e:
                    b7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.71.232.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196956

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:25:22:6a:d3:39:f8:af:f8:bd:a8:ef:0e:0f:b4:47:57:
         82:ab:99:43:2d:ed:3b:b5:7c:a3:94:31:f4:cb:d6:39:96:a0:
         9a:2b:48:35:f4:4a:99:f0:55:4b:00:bc:4a:0f:a0:96:c9:b5:
         33:5d:89:4b:7e:84:28:97:57:59:35:e9:6e:eb:1f:4e:1b:0a:
         6f:0c:66:c6:71:77:b0:86:a0:a4:36:58:62:b5:8d:3d:66:90:
         34:7c:7f:8a:56:65:93:13:28:30:9c:b1:2d:80:29:f0:91:64:
         50:b1:71:1d:77:fe:4f:04:40:65:d0:e0:d8:24:f4:8d:eb:b3:
         38:b8:1d:13:68:5e:0c:b6:88:76:c8:7e:30:38:89:b1:c2:2c:
         37:32:79:46:56:c3:c6:48:c6:4a:4f:05:29:f6:e6:10:80:4c:
         07:77:a8:13:6e:06:06:78:ac:f3:2e:75:88:a1:b1:59:a6:e1:
         28:80:82:44:16:c4:68:2e:d0:b8:1d:b8:e9:f9:b8:99:e6:f9:
         54:f9:78:e7:38:70:69:50:1f:75:4a:0e:b2:63:67:98:8b:f0:
         bd:fd:91:a8:36:a0:13:71:55:90:11:8c:74:05:77:49:d3:42:
         53:69:aa:22:ef:ae:72:89:a7:b6:5a:f5:d2:b6:a0:7f:fd:c1:
         4d:eb:fb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----