Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
File:                     yYDRnDv8xARxVndvAqNJiY5GuQ0.cer (raw, json)
Hash identifier:          7KF8Hv1cm/JLuHBR2QPA7Ud8qyoWqjJiJnymKPutTec=
Subject key identifier:   C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAA93CD9DFD8733BA932C65F4D53E8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199241

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:a9:3c:d9:df:d8:73:3b:a9:32:c6:5f:4d:53:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c980d19c3bfcc4047156776f02a349898e46b90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:e3:f7:92:23:a6:1b:e4:61:45:c5:34:56:
                    f4:1b:8f:88:c6:b6:75:df:ac:6d:ec:e4:5a:65:32:
                    ba:29:29:5a:90:33:6c:82:10:c8:e7:37:96:8c:e0:
                    70:4d:df:73:b5:6a:9e:e6:a5:0a:d9:c1:33:a7:97:
                    7f:65:c1:d3:fc:d4:29:be:d1:33:03:a8:b6:e4:13:
                    ec:79:e5:cd:9f:10:81:ba:ac:18:f1:de:f5:32:62:
                    b2:e5:97:af:12:b1:03:6b:98:ee:d5:57:f5:2b:f5:
                    56:9e:fc:1d:ba:c2:7a:73:6a:c8:36:6f:af:5a:15:
                    0f:40:77:48:f2:f5:dd:11:25:2c:f8:f3:e2:d1:c0:
                    8d:fd:5d:3a:21:9a:5b:a9:68:1d:38:63:28:c2:b9:
                    a0:37:99:9f:de:4c:0e:09:6a:3a:dc:dd:8b:49:4a:
                    b6:8b:23:45:b4:c5:71:c2:5c:fb:c8:bf:8d:43:fb:
                    8a:4f:82:f9:df:ba:35:5b:50:e4:cf:ff:33:7f:91:
                    04:0f:60:7c:f1:38:14:d2:55:2d:24:0a:84:d7:4a:
                    4c:a6:98:03:5d:3c:a6:f9:4a:89:c9:22:e9:14:d6:
                    19:b6:6f:d7:52:c6:71:52:dc:12:48:a8:0a:73:9b:
                    4c:a0:a5:93:86:be:62:17:18:89:4d:3f:9c:83:5b:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199241

    Signature Algorithm: sha256WithRSAEncryption
         9a:af:a7:f5:02:f4:e1:1f:25:a5:65:0c:24:93:f8:4c:9b:45:
         4d:02:01:33:c2:f9:5a:6c:82:c2:42:9c:e9:78:76:ba:56:e8:
         c7:87:21:1d:de:51:a6:66:e6:a8:4c:46:00:d4:33:a7:2f:f4:
         52:a6:a0:5b:f9:8d:4f:b5:2f:8d:2d:b8:9a:41:72:e9:44:ea:
         3e:3f:6a:a3:08:5c:6f:a0:11:41:16:22:9e:50:92:fe:05:92:
         7f:34:74:61:14:87:19:a2:9d:fd:e1:9d:ef:26:53:9c:68:fe:
         24:33:a0:f2:ed:d9:7c:79:30:09:42:08:36:a0:23:e9:ea:a5:
         10:e0:97:3a:16:85:bf:3f:e6:c0:da:a3:f9:0a:91:5d:fe:e8:
         03:c6:d2:c9:10:91:bb:2d:81:19:b9:e9:86:73:07:26:fa:cc:
         e6:71:49:88:af:ea:b8:2c:f6:ac:94:86:b2:1f:f1:e8:32:40:
         23:1a:98:23:44:78:7b:df:b4:de:a3:c8:bf:e9:5a:ec:74:79:
         55:e1:a9:2a:8d:da:70:2b:09:d2:60:3a:4b:be:85:55:d5:b6:
         8e:1c:b9:1c:ab:51:b2:ec:56:93:cb:9b:22:df:76:a9:91:09:
         2c:c9:20:80:20:9d:9e:72:78:6a:ea:d7:b9:36:74:5e:16:91:
         c2:87:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----