Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
File:                     tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer (raw, json)
Hash identifier:          hXNX4pkpClm2+e4ZXEPjeB+Yo7Z9s7PXH2MNkYzlJzw=
Subject key identifier:   B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B2DC69D29A352C8B66C8143CF7E82
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 38926
                          IP: 5.44.160.0/21
                          IP: 185.105.68.0/22
                          IP: 193.169.64.0/23
                          IP: 195.114.114.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:2d:c6:9d:29:a3:52:c8:b6:6c:81:43:cf:7e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:2e:af:ed:2a:61:88:db:61:3e:6d:d3:4a:
                    98:16:03:20:bb:42:54:06:b8:c1:95:3a:97:52:9b:
                    d2:66:0b:27:89:c7:4c:68:1e:de:02:6d:0c:1a:44:
                    1b:0a:79:b0:03:0c:99:46:75:62:72:d0:5e:8a:7b:
                    61:fb:87:bb:bf:12:6c:61:ec:29:20:67:0e:cf:b8:
                    06:e2:8e:76:da:e8:c0:95:aa:79:7a:60:e4:fd:39:
                    b0:15:b1:03:bf:ce:a0:3b:60:16:e2:39:f1:05:f8:
                    58:12:82:65:31:37:29:ae:c4:06:b3:81:0d:13:17:
                    9d:03:ec:17:3e:39:fc:7b:50:b6:3b:94:92:ab:e2:
                    f7:00:e7:aa:e1:50:62:c6:3a:4d:57:ac:75:66:8a:
                    df:ea:77:18:93:ae:50:58:56:84:0a:60:f7:79:82:
                    27:47:8c:cf:5b:06:ae:59:16:f6:31:d1:01:43:a6:
                    87:e3:8b:bb:1b:e5:f3:88:52:09:08:61:da:99:9e:
                    b5:37:d1:94:84:bd:db:39:b3:90:f4:6f:05:08:49:
                    7a:48:4f:83:86:0e:3a:dd:3a:32:de:a5:00:80:bd:
                    90:9e:8b:14:96:7a:a1:bb:ad:ce:cb:47:8b:59:23:
                    4d:6e:a8:c5:da:f4:04:5b:a3:28:59:e7:1f:15:54:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.44.160.0/21
                  185.105.68.0/22
                  193.169.64.0/23
                  195.114.114.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38926

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:e8:48:bc:31:2a:5f:18:6b:32:53:ea:91:e4:97:c5:46:
         d2:55:e5:55:3f:cd:d4:9e:9b:f4:4b:14:16:32:77:d4:e4:a6:
         37:ad:89:56:ad:1c:51:ed:53:f9:2f:69:08:bf:79:95:c7:96:
         57:60:ed:95:60:07:ae:e4:bf:d4:02:b6:67:8a:e8:b8:23:f8:
         26:7c:e0:aa:47:7f:68:09:5e:60:10:d0:7a:95:2b:5f:37:34:
         a3:a9:20:9e:c5:ca:c4:05:19:2a:8e:bd:ec:b6:cd:ad:6b:90:
         bf:4d:0f:21:81:33:40:66:fc:6c:0b:9b:75:86:5e:5a:3a:52:
         95:50:07:51:b9:f7:e3:7c:a7:6c:91:94:37:0a:32:3a:74:78:
         60:e9:99:88:bc:96:e7:59:24:b0:de:0a:d8:69:85:cf:1e:d0:
         eb:94:3f:d5:84:a6:92:ad:f3:e6:64:e3:93:ba:0d:30:df:cc:
         4a:2e:1c:4c:63:9d:41:f4:92:77:16:4e:58:ba:6c:00:68:1d:
         0e:18:63:38:bd:0e:19:70:14:dc:7d:da:f9:c1:9e:b6:cc:9e:
         20:8d:da:f3:61:a5:08:ab:ed:1f:2d:a1:e8:20:9a:63:37:df:
         f2:a8:ee:85:46:6b:e9:11:d9:49:6a:bd:66:26:cc:9a:8f:89:
         e2:5d:8a:f1
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZQmay3GnSmjUsi2bIFDz36CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjljYjcwOTkzNGI5OWY2ODlkZDFlOTlkNzJjMWIwMDBmZDg3MmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUkur+0qYYjbYT5t00qYFgMgu0JU
BrjBlTqXUpvSZgsnicdMaB7eAm0MGkQbCnmwAwyZRnVictBeinth+4e7vxJsYewp
IGcOz7gG4o522ujAlap5emDk/TmwFbEDv86gO2AW4jnxBfhYEoJlMTcprsQGs4EN
ExedA+wXPjn8e1C2O5SSq+L3AOeq4VBixjpNV6x1Zorf6ncYk65QWFaECmD3eYIn
R4zPWwauWRb2MdEBQ6aH44u7G+XziFIJCGHamZ61N9GUhL3bObOQ9G8FCEl6SE+D
hg463Toy3qUAgL2QnosUlnqhu63Oy0eLWSNNbqjF2vQEW6MoWecfFVSHMQIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFLactwmTS5n2id0emdcsGwAP2HLFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzQxZTI4
Ny01MGI0LTQ2ZWYtODJjYy1jYTNiNzI3OGRkZTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNDFlMjg3
LTUwYjQtNDZlZi04MmNjLWNhM2I3Mjc4ZGRlMi8xL3RweTNDWk5MbWZhSjNSNlox
eXdiQUFfWWNzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYAwQDBSygAwQCuWlEAwQBwalAAwQBw3JyMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwCYDjANBgkqhkiG9w0BAQsFAAOCAQEAg7XoSLwx
Kl8YazJT6pHkl8VG0lXlVT/N1J6b9EsUFjJ31OSmN62JVq0cUe1T+S9pCL95lceW
V2DtlWAHruS/1AK2Z4rouCP4Jnzgqkd/aAleYBDQepUrXzc0o6kgnsXKxAUZKo69
7LbNrWuQv00PIYEzQGb8bAubdYZeWjpSlVAHUbn343ynbJGUNwoyOnR4YOmZiLyW
51kksN4K2GmFzx7Q65Q/1YSmkq3z5mTjk7oNMN/MSi4cTGOdQfSSdxZOWLpsAGgd
DhhjOL0OGXAU3H3a+cGetsyeII3a82GlCKvtHy2h6CCaYzff8qjuhUZr6RHZSWq9
ZibMmo+J4l2K8Q==
-----END CERTIFICATE-----