Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
File:                     Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer (raw, json)
Hash identifier:          kEgSZNU6EnqgShV/qjxYRkwzhhX/ipnuA8WQKSOWiOE=
Subject key identifier:   63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAA4130F2687E3CCF5C1DD5220AD4C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 171.22.145.0/24
                          IP: 185.243.129.0/24
                          IP: 195.149.74.0/24
                          IP: 2a01:f180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:a4:13:0f:26:87:e3:cc:f5:c1:dd:52:20:ad:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=632e3d037bf0507571b2a068cb90308374ce53ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:56:ab:78:d6:84:c2:19:1d:46:9b:d3:cb:
                    ec:45:42:97:ca:b5:a2:12:d3:d5:f2:ee:0f:58:13:
                    7d:0f:5e:8b:90:81:9a:95:78:bf:b2:af:9e:c0:1a:
                    c9:73:07:12:be:22:19:9a:35:eb:de:fb:16:b0:67:
                    5d:95:d3:30:3f:c8:ed:1a:36:29:77:72:28:b9:2b:
                    60:7e:b3:0f:32:19:d6:49:a5:b8:3b:12:97:b6:59:
                    a7:24:74:fb:81:c0:1e:b8:eb:d3:63:ce:e1:ac:06:
                    ad:8b:3b:25:17:5a:51:7e:29:03:04:58:8e:9c:46:
                    4c:b3:4c:24:d6:2c:93:e9:4d:4b:cb:47:1d:23:8a:
                    71:c1:03:da:1e:6e:0e:eb:c9:eb:86:9e:f9:c5:2b:
                    88:97:e4:c3:b0:55:9c:ac:ea:82:5e:c2:72:20:51:
                    1b:c8:8a:6f:70:8c:5c:f3:44:70:f4:d0:7e:9d:72:
                    22:94:c9:40:79:2a:8a:ff:c2:ba:89:d8:c6:a3:a6:
                    bd:6e:70:1b:6f:3c:63:87:80:ca:3b:d1:07:3b:6c:
                    91:a1:72:45:85:9a:cb:22:d7:99:97:93:35:5a:a7:
                    09:6a:d4:cd:09:8b:c1:05:b3:fc:ad:52:8b:ad:f1:
                    0a:b5:d0:95:d1:94:6a:91:45:38:f1:ca:67:3e:97:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.22.145.0/24
                  185.243.129.0/24
                  195.149.74.0/24
                IPv6:
                  2a01:f180::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:9e:7a:c1:ce:2e:36:e6:dc:c8:7b:d9:1e:e8:6a:85:77:
         80:7f:1d:59:91:d6:8a:42:1d:eb:1b:3e:ba:1a:17:63:ab:e8:
         94:7f:0f:ff:44:60:a0:b9:50:7f:0b:55:96:bf:25:66:88:14:
         7e:2f:1d:0b:95:0e:5b:b6:50:44:c8:85:6e:7b:72:96:92:0d:
         ba:5c:23:a0:ca:1e:fb:e3:20:09:a6:32:13:07:4f:5c:eb:b0:
         27:94:a5:6a:01:76:6c:92:94:f4:5f:dc:1d:21:17:4e:27:f7:
         22:f7:84:a9:88:45:f2:40:1d:23:64:63:ef:32:57:85:3d:de:
         06:aa:d7:a1:38:97:59:89:0b:43:be:77:1e:e7:c0:30:77:52:
         48:b5:8f:c6:0b:4e:29:56:2f:07:14:11:b0:d4:f2:63:b1:08:
         e8:3a:9c:a4:fc:16:d2:c7:9d:ac:a7:e3:35:4f:f2:91:f7:40:
         2e:e4:a9:f3:7e:23:37:d7:55:7f:1f:b3:ef:02:88:70:ac:63:
         5a:40:e0:67:27:b2:16:b5:eb:4d:ba:92:9f:bd:f4:41:b8:32:
         5f:4b:4a:38:e9:2e:33:ae:a3:c8:6a:91:0f:25:4d:75:3a:fa:
         0d:6b:53:4e:22:a4:80:76:77:cf:67:c1:99:5d:bf:89:5e:39:
         21:34:2a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----