Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
File:                     Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer (raw, json)
Hash identifier:          BJwGL2hnGvGtNl96T6WKBYdqTrAe+vV7Zdkozn0MmHg=
Subject key identifier:   62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236961918B1CF9C1F9D1E5FD195F37D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49704
                          IP: 2001:678:924::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:61:91:8b:1c:f9:c1:f9:d1:e5:fd:19:5f:37:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:3d:ce:b5:84:1f:ad:5e:d5:99:99:c7:15:
                    10:9d:b9:cd:98:af:ab:ff:5c:68:a3:3b:81:d9:7c:
                    0a:5e:06:29:94:93:23:cd:46:e8:87:bf:77:07:c1:
                    fa:d2:e0:d4:85:6e:72:40:03:36:b3:69:95:92:d3:
                    f0:81:e7:7c:94:e8:9b:5e:b7:17:4c:d0:90:e8:ac:
                    b2:7b:b1:d8:e8:2c:9e:04:a6:d0:7d:dc:4a:ad:55:
                    de:9c:87:21:8c:5d:e4:98:cc:1c:4b:a9:c7:23:1b:
                    07:4a:9e:cf:9e:84:22:f8:8e:76:d6:c8:31:32:46:
                    15:98:e2:e7:91:19:1b:8e:9e:34:f7:2e:34:97:75:
                    43:34:3c:52:4c:f3:5e:48:a5:4f:1c:47:84:af:bc:
                    d4:43:c9:79:a6:c9:fe:7e:71:68:96:f4:eb:08:bc:
                    8e:5b:15:66:af:86:dc:5f:21:e8:08:30:2e:a0:8d:
                    74:5c:ac:b2:61:83:f9:92:b0:1a:c3:b0:c8:d3:ff:
                    85:7e:6e:50:c6:cf:8b:a4:00:ee:e0:ae:1a:c1:b4:
                    96:90:ff:63:fd:5b:39:9c:d1:cb:85:30:9e:cb:99:
                    cc:78:47:82:c0:3a:66:d7:08:1c:1d:03:2c:35:ad:
                    b2:2c:ec:90:b0:bc:96:9a:03:63:17:3d:88:d8:3f:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:924::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49704

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:ef:84:83:a9:0a:56:99:bf:08:ad:9e:a7:14:82:0e:7f:
         3b:82:ed:84:5d:b2:50:8d:22:cb:0b:1e:51:70:5b:6f:30:ec:
         69:69:13:eb:98:33:0f:04:33:5c:3d:95:8b:39:cc:56:f9:5b:
         97:07:13:97:42:42:b8:da:62:c4:c5:0b:9f:0d:63:59:06:90:
         c7:16:ad:1e:43:89:75:cd:9b:8c:5b:bf:56:88:45:bd:33:5a:
         a7:f9:88:18:cc:2d:25:d3:cd:25:8d:7f:b3:db:ac:73:cd:a6:
         73:42:07:73:f7:c3:77:f1:f3:af:8a:04:b9:b5:87:e1:a0:b2:
         e1:c0:9b:2c:f4:5b:e0:03:a3:06:4f:7d:fb:04:65:bf:47:7a:
         67:17:c7:7f:ff:32:44:18:d1:da:af:92:6b:ee:02:7f:bb:58:
         54:10:ce:68:a3:94:2e:7f:9d:4e:89:42:d6:67:1b:c7:4c:70:
         c1:6c:ed:5c:53:c7:b5:b1:9c:8e:95:73:3c:c0:c5:00:41:66:
         7b:5b:04:a6:d6:6c:73:61:16:88:00:22:af:4a:b2:99:51:38:
         85:4d:bc:46:a4:64:65:ea:20:1c:49:2b:a9:25:22:eb:d1:16:
         b5:34:25:7e:a3:8b:cd:33:2c:9a:5d:2e:91:83:ad:71:87:c3:
         f9:87:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----