Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
File:                     _CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer (raw, json)
Hash identifier:          bvn/OTJIDeb+lT6MGzZgHb3oJDlF8sJ1n51/Orc621E=
Subject key identifier:   FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521EE44CDC4EAA68ABCE06AA47598A3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59570
                          AS: 208454
                          IP: 2001:678:d30::/48
                          IP: 2001:678:d34::/48
                          IP: 2001:67c:2148::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:ee:44:cd:c4:ea:a6:8a:bc:e0:6a:a4:75:98:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:23:35:e3:a5:9e:7d:de:cc:59:d9:d9:49:
                    bd:78:03:d9:a1:9a:1c:fb:9d:ab:49:78:c7:cc:f4:
                    07:6c:72:22:43:e4:ee:94:45:90:cc:90:52:1f:b8:
                    a6:ca:a6:4f:46:8f:a2:55:98:c6:d3:32:fa:a8:57:
                    d4:96:d2:41:0a:bc:d5:a3:27:79:50:7e:97:77:39:
                    60:49:94:82:10:db:ab:0e:e7:ba:5e:0f:63:87:fe:
                    aa:5f:5d:2d:17:30:4a:0c:fa:f8:6c:eb:81:87:86:
                    3e:b0:33:d4:cf:60:d9:e2:2a:a8:a4:71:e6:e4:d8:
                    9b:79:1e:a2:0b:bc:44:ad:71:11:fa:48:9b:6c:a9:
                    01:8d:b3:dd:f2:85:6c:82:37:8d:e2:31:a2:a3:39:
                    07:fd:6f:f8:bb:4a:8b:c0:78:52:9c:83:66:e5:1c:
                    ad:21:0b:32:0e:7f:d3:fe:fe:e0:d7:4a:7b:8e:58:
                    ef:8d:12:ad:f7:c1:50:b7:39:96:e2:dd:d8:eb:5d:
                    64:2f:dc:4f:c9:3f:ef:40:51:17:a2:aa:bc:79:24:
                    50:a3:34:13:11:1a:19:dc:61:6b:85:9c:d7:04:ad:
                    94:51:97:de:64:0d:8c:30:24:4e:f6:4b:ae:b3:db:
                    01:90:7c:e1:e7:03:e4:22:a9:b0:b8:1c:3b:2c:61:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d30::/48
                  2001:678:d34::/48
                  2001:67c:2148::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59570
                  208454

    Signature Algorithm: sha256WithRSAEncryption
         75:97:ac:7a:f9:e7:5c:2d:71:2e:07:33:68:79:20:f1:2f:a0:
         d0:86:13:c4:1b:18:8d:ef:34:98:bd:2f:37:84:50:be:e7:36:
         2d:09:38:09:86:47:57:af:16:01:e3:f6:e4:ac:f9:2a:73:7d:
         27:c8:07:d3:16:50:d3:49:20:59:02:74:99:c2:27:f9:06:20:
         f2:d7:b7:5d:a8:00:57:3d:35:66:9f:33:1d:62:33:99:16:d6:
         f5:7c:0e:81:f3:86:d4:84:b4:ba:b0:2f:aa:a6:b6:c0:ff:67:
         c3:b6:8b:30:1f:1d:80:dd:9c:35:08:e5:67:1f:f5:01:71:e6:
         0f:c9:c6:2e:f0:11:9d:cf:8f:c8:8e:03:d6:15:f9:c1:10:dd:
         9f:22:ba:f9:f2:d1:71:8e:37:cc:8b:f1:82:e2:cc:30:12:43:
         b5:85:e5:64:14:26:20:0e:0c:8d:17:0c:78:b4:a7:c8:34:5c:
         1f:7c:e7:f7:63:9e:05:04:f7:c1:da:03:7a:0c:60:43:27:38:
         28:05:6f:ab:07:b5:63:3f:a8:2f:ec:b7:64:b4:85:58:bf:2b:
         4b:10:09:ea:ce:fb:a6:13:db:ba:76:d5:70:a8:e6:8f:1f:37:
         d5:9d:c9:1b:7a:6a:51:bc:42:ad:53:e3:5c:fd:e3:1e:0c:f4:
         07:a3:64:72
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQlIe5EzcTqpoq84GqkdZijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzI2MjFlZTMxZTA2YWFkYzFjYTNhMzc2ZTQ1N2Q4ZDA0OTZiMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmIjNeOlnn3ezFnZ2Um9eAPZoZoc
+52rSXjHzPQHbHIiQ+TulEWQzJBSH7imyqZPRo+iVZjG0zL6qFfUltJBCrzVoyd5
UH6XdzlgSZSCENurDue6Xg9jh/6qX10tFzBKDPr4bOuBh4Y+sDPUz2DZ4iqopHHm
5NibeR6iC7xErXER+kibbKkBjbPd8oVsgjeN4jGiozkH/W/4u0qLwHhSnINm5Ryt
IQsyDn/T/v7g10p7jljvjRKt98FQtzmW4t3Y611kL9xPyT/vQFEXoqq8eSRQozQT
ERoZ3GFrhZzXBK2UUZfeZA2MMCRO9kuus9sBkHzh5wPkIqmwuBw7LGEMYQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFPwmIe4x4Gqtwco6N25FfY0ElrENMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzQxOGZl
Mi00ZjdkLTQwYWMtYWJlNC0xMTliYmQ3NjE5NzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvNDE4ZmUy
LTRmN2QtNDBhYy1hYmU0LTExOWJiZDc2MTk3My8xL19DWWg3akhnYXEzQnlqbzNi
a1Y5alFTV3NRMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzAhBAIAAjAbAwcAIAEGeA0wAwcAIAEGeA00AwcAIAEGfCFIMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDosgIDAy5GMA0GCSqGSIb3DQEBCwUAA4IB
AQB1l6x6+edcLXEuBzNoeSDxL6DQhhPEGxiN7zSYvS83hFC+5zYtCTgJhkdXrxYB
4/bkrPkqc30nyAfTFlDTSSBZAnSZwif5BiDy17ddqABXPTVmnzMdYjOZFtb1fA6B
84bUhLS6sC+qprbA/2fDtoswHx2A3Zw1COVnH/UBceYPycYu8BGdz4/IjgPWFfnB
EN2fIrr58tFxjjfMi/GC4swwEkO1heVkFCYgDgyNFwx4tKfINFwffOf3Y54FBPfB
2gN6DGBDJzgoBW+rB7VjP6gv7LdktIVYvytLEAnqzvumE9u6dtVwqOaPHzfVnckb
empRvEKtU+Nc/eMeDPQHo2Ry
-----END CERTIFICATE-----