Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
File:                     y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer (raw, json)
Hash identifier:          Wr7rtnKgCEwFVcMTvOit0W5tT+PAMw7cEvlgZ9d3wss=
Subject key identifier:   CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067FC686456FB541197DD4E9E3DFB76
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203741
                          IP: 91.195.46.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:fc:68:64:56:fb:54:11:97:dd:4e:9e:3d:fb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:2f:d0:27:26:6d:b2:49:a3:33:89:76:37:
                    a4:ab:e8:20:bb:1b:78:e4:15:a3:61:9d:f5:b4:33:
                    fd:f4:0a:41:78:07:83:61:eb:5e:13:9e:6f:35:28:
                    11:98:f7:17:16:03:55:3b:95:18:a1:35:b8:e5:52:
                    49:50:c9:59:16:d5:aa:4e:c1:58:b4:4e:16:f9:a7:
                    19:30:5d:43:b5:ea:65:d6:02:00:fc:dc:de:52:c2:
                    d8:05:82:35:31:ab:7e:bf:2f:2b:47:d1:89:df:40:
                    09:a9:45:32:b4:1f:4c:60:0c:93:b2:09:e1:da:48:
                    98:87:42:c2:1e:98:af:2e:17:e1:03:1f:a0:df:f0:
                    65:b0:05:1d:b1:d9:c3:52:68:10:af:5d:e9:40:b5:
                    df:64:9a:bb:2c:d4:5e:dd:5c:b1:09:41:db:bd:28:
                    78:6b:11:64:69:01:ee:ae:cc:08:a1:56:2f:5a:9e:
                    80:19:27:21:8d:46:7f:60:c0:c6:1f:35:9d:00:a7:
                    17:ec:a4:17:ca:c6:bc:8e:e4:d1:da:3c:46:40:76:
                    78:de:ce:c3:b7:6a:9a:49:11:0c:18:f4:6f:19:ab:
                    a6:e2:24:c9:22:40:f6:ee:d9:3f:98:57:43:d5:96:
                    d2:37:d2:b2:49:37:e6:0f:67:47:e5:cf:97:5f:51:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.46.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203741

    Signature Algorithm: sha256WithRSAEncryption
         9c:2e:ac:4c:04:cd:ee:4c:53:93:f8:52:5c:88:15:b6:72:79:
         e2:2a:75:f4:2f:ac:aa:4d:24:04:60:5d:de:58:8d:38:82:8f:
         bc:57:6a:50:e0:ac:b8:68:73:df:a3:56:0e:cf:72:c6:c6:85:
         8b:f0:21:74:4b:44:e7:15:33:fd:1e:64:3c:93:50:9e:65:65:
         fe:c0:22:52:9a:91:32:00:53:be:d6:5c:d8:22:a3:db:92:86:
         84:09:ed:43:80:15:2a:34:fe:f0:83:f8:8a:02:3f:db:be:17:
         9a:5d:77:e6:6b:c3:02:4d:a1:ea:33:18:98:45:b1:2a:53:8c:
         8f:cc:ee:47:91:98:f4:1e:27:88:59:38:53:09:3f:f7:58:7a:
         40:5e:01:cc:36:2f:30:08:d8:38:0c:be:c9:51:13:de:f6:34:
         73:d5:87:7a:3e:36:90:91:9e:f8:0c:78:dd:2a:69:5e:6e:97:
         2e:44:83:05:bc:a3:ba:21:12:63:15:04:52:57:4e:e3:bd:5b:
         47:4e:4d:8c:a6:fe:e9:38:92:e6:56:05:69:d6:ab:21:78:82:
         b2:01:b7:e8:a0:a5:75:d8:2c:4e:d1:c1:c6:ec:e8:41:ac:9c:
         5b:de:fa:cf:bd:8a:3f:c5:da:cc:d3:fe:4d:84:d6:6b:c5:be:
         8d:53:1a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----