Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
File:                     cylEqFODVbKux2ZF_ZSUSIrnAuc.cer (raw, json)
Hash identifier:          3jabQw4oIYc/4yUc2t4s7RQd5gRCIdSZizybDEl8P+I=
Subject key identifier:   73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9EA41A3635ED6A8D9EF9CE2F37BDC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:50:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200559
                          IP: 2001:67c:2edc::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:ea:41:a3:63:5e:d6:a8:d9:ef:9c:e2:f3:7b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:50:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=732944a8538355b2aec76645fd9494488ae702e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:19:a7:b6:c5:72:c0:ae:2b:0b:04:90:b7:
                    59:e8:4c:04:5a:e9:09:6f:60:1d:db:98:fa:62:70:
                    0e:3a:6c:55:21:48:f9:35:f0:db:3a:95:21:e4:73:
                    4d:0c:5d:3e:88:f4:03:5d:ba:9c:46:7b:ef:88:dc:
                    32:20:5e:00:fc:0f:68:a0:0f:b8:5c:e7:9e:16:c2:
                    4f:72:a6:cc:a6:61:fe:e1:2c:96:3b:52:62:90:78:
                    96:18:73:6c:9b:4f:39:ce:a9:ee:d3:ac:71:dd:39:
                    79:48:fa:ec:e3:d4:57:a3:57:76:b3:56:fe:12:c3:
                    a2:34:3f:c8:13:9f:fd:e9:3c:b5:7e:9b:c4:ea:31:
                    43:9b:15:0e:65:2c:bd:17:4a:20:33:8f:dc:e6:75:
                    b2:9b:00:8a:17:e0:f9:e3:3f:4b:c4:d3:5e:31:1d:
                    ec:06:3a:4e:59:0b:b0:77:ca:ee:f6:2b:e2:a8:e7:
                    fd:b4:dc:47:6a:1a:40:85:3a:f4:d8:f7:25:59:97:
                    9b:a6:52:0d:c6:a5:16:23:6e:98:c8:6d:4c:fc:b0:
                    1e:d2:56:4e:67:f8:d3:0e:cc:9b:48:8c:2d:ac:f5:
                    48:54:5e:0a:27:61:24:ac:d0:0e:58:0a:30:29:8b:
                    33:8a:c6:d0:3f:d2:6d:17:25:e1:7d:4f:64:90:3e:
                    36:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2edc::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200559

    Signature Algorithm: sha256WithRSAEncryption
         89:97:1e:b3:42:cf:80:0f:da:30:1f:7a:2a:20:08:4c:c5:fd:
         b5:17:ba:33:e1:a5:f8:a5:47:45:ec:f0:07:f6:bc:0b:5f:41:
         bc:da:87:29:1b:7d:73:fa:96:32:47:6e:1d:2f:ab:14:20:56:
         47:88:2b:83:3c:67:df:5c:91:0f:ce:62:af:e7:52:67:3c:32:
         08:c9:c3:d0:0d:c5:72:01:81:18:db:79:de:0a:f3:ac:b0:bb:
         b8:96:ab:25:1b:a5:a1:b7:58:f3:8d:15:b5:95:03:76:51:cf:
         06:74:30:44:ff:84:21:01:f4:2b:06:64:14:fb:97:07:40:c8:
         f7:f9:c0:42:86:13:34:89:10:84:e3:c3:1e:77:24:53:a9:4e:
         f3:5a:0b:28:38:27:44:c5:ae:09:d2:ac:80:ce:e9:28:9c:0b:
         03:2e:e7:ab:cb:bc:1c:1f:38:fa:49:13:5a:94:6c:b0:77:bd:
         0d:65:40:01:9f:dd:6d:ad:ed:2a:70:bf:5f:0a:a7:6d:e3:a6:
         be:57:10:90:72:65:55:e6:ea:29:ce:88:1c:e0:9d:dd:c6:3c:
         d2:ac:d9:e4:40:40:0d:3e:70:5f:cc:2a:7f:0f:75:06:ad:ff:
         b5:e1:d8:85:cb:9d:3b:04:f9:ec:ea:aa:7e:03:85:20:8e:01:
         a3:16:66:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----