Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
File:                     mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer (raw, json)
Hash identifier:          vKFr4+XxSZtx1qJERUctTXNKEAmB5YtjirxJTWoba08=
Subject key identifier:   99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA9AD353298CBCDAA7D9634B3736B9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208429
                          IP: 45.137.164.0/22
                          IP: 2a0e:a440::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:9a:d3:53:29:8c:bc:da:a7:d9:63:4b:37:36:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=998674263fccd07f684e1e199302eeefe783fb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:b7:bb:2b:23:53:91:e3:27:08:cb:c4:9b:
                    8c:d9:69:f8:c3:55:09:13:b5:37:47:f2:0d:da:02:
                    ce:38:71:d2:fb:ce:7d:48:84:7b:b0:c9:47:e6:a8:
                    ac:76:dc:42:69:da:9e:00:27:b6:fa:c4:e8:77:d6:
                    94:38:ee:ab:ca:fc:4c:55:e6:17:82:7e:d4:5d:05:
                    aa:5f:43:94:4b:25:a1:3c:f3:0a:0c:19:e9:7f:fe:
                    c7:2e:3e:c1:18:9b:a1:03:95:cc:3a:bb:29:1d:bb:
                    99:44:4d:36:b0:4a:3d:d8:6a:cf:f0:d4:7a:c1:22:
                    bd:f0:24:5d:c2:51:43:0f:c5:b2:77:f3:87:41:4f:
                    ab:4a:fb:53:94:f9:6e:e0:72:f7:28:fc:65:23:c9:
                    4a:49:43:f1:04:1d:85:23:55:7b:77:80:20:ae:e1:
                    b1:33:97:81:69:4b:c2:7f:ea:d8:e2:0b:16:e0:19:
                    14:73:5e:bb:73:40:35:1b:af:c7:bc:e3:5e:37:ea:
                    b2:50:16:b0:4d:80:4b:7e:5f:8a:8e:0f:7a:38:f3:
                    5d:cb:6e:04:a5:f5:be:a6:97:d2:be:4a:80:60:dc:
                    c9:21:54:e8:14:7c:93:04:e6:44:f7:e2:ad:23:d2:
                    7c:32:e6:ba:11:4d:c2:68:85:3b:59:ff:46:66:a0:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.164.0/22
                IPv6:
                  2a0e:a440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208429

    Signature Algorithm: sha256WithRSAEncryption
         1b:af:37:3f:91:9c:26:b8:fb:3a:67:1f:11:8e:e0:c1:c9:dd:
         e8:18:f1:78:ba:48:7f:c3:00:1f:bc:ab:b9:b5:49:e5:36:46:
         54:fc:39:98:b7:6e:07:03:c2:61:d4:7c:24:8d:de:5b:06:1d:
         8f:19:1d:e5:08:f9:b6:61:dd:06:59:cd:2f:3d:ad:04:a0:1b:
         7a:4a:00:b7:47:a5:b7:26:4a:39:3b:1a:0d:be:29:8c:db:56:
         f2:1b:3f:69:b7:22:33:cf:f9:7d:1d:b6:b5:c0:0c:da:26:52:
         a4:9b:eb:19:99:0e:48:6c:0f:c6:c3:8c:82:05:f2:2b:4e:2b:
         9b:65:1e:3f:15:7f:b1:cb:15:67:3a:83:08:7b:83:1f:f2:3d:
         3d:cd:38:3f:e9:94:65:8a:33:af:e8:52:92:8c:27:6a:83:83:
         cf:fb:41:f7:9a:f5:5b:c6:e9:dd:e0:51:f9:57:55:8a:d3:38:
         b1:e2:60:49:a2:23:7b:6b:5e:0c:be:bb:02:54:87:fb:64:d5:
         c2:6c:bf:72:67:5a:1a:21:c3:46:f0:7a:0d:14:dc:9e:c2:f6:
         ef:bc:3d:52:34:8a:be:f1:5b:6d:a4:f6:b8:66:15:1d:46:76:
         8b:f2:d4:4c:1d:15:d8:8f:10:e1:a8:20:dd:68:5f:8e:35:d2:
         80:a6:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----