Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
File:                     y_FtyaS1vU0MQnioXAhVkwIL6jE.cer (raw, json)
Hash identifier:          DvccOpOf3prgQ8rwZeZTxIZHIxpGj47Hm2aClCfiwQM=
Subject key identifier:   CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421443A78F8102D2B1C5AA0639DEBC014
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57533
                          IP: 91.231.97.0/24
                          IP: 2001:67c:568::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:3a:78:f8:10:2d:2b:1c:5a:a0:63:9d:eb:c0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:89:9e:77:27:ac:01:42:d1:9b:20:b5:05:
                    8b:dd:9a:72:ad:a6:c0:43:0f:d0:3a:9c:f6:a0:0f:
                    b0:6a:be:0f:bc:4a:cf:24:b5:b1:56:4f:93:82:fd:
                    35:57:3c:07:87:67:4c:13:2c:a7:ce:15:74:3a:87:
                    da:60:4b:26:54:2e:4e:7c:3b:56:cd:1c:55:cb:a2:
                    16:2f:cd:42:40:30:2a:07:cb:21:a4:9a:6c:70:b2:
                    e5:57:c7:40:62:59:69:50:16:3b:92:91:6b:33:74:
                    1b:32:d8:17:9a:11:47:c0:c0:2f:8c:01:ef:dd:37:
                    7e:d2:e8:84:b9:a0:ca:01:6b:b5:82:00:7c:c0:69:
                    33:46:55:9e:75:ee:f4:46:fe:a9:1c:be:98:ac:99:
                    82:78:03:f3:06:27:5b:22:63:7a:9d:6c:95:17:49:
                    02:bc:fe:b6:f1:dc:2a:ab:40:7c:be:45:7c:85:fc:
                    8f:c2:96:4c:99:31:c3:1a:a7:18:44:75:d3:e7:17:
                    7e:64:33:50:b1:81:96:b5:21:a2:9d:11:b1:99:3c:
                    30:5a:db:4e:0c:ac:d6:17:97:7d:2b:c4:82:de:bb:
                    a7:cc:ec:dc:ed:85:6c:0c:60:db:cc:26:2f:77:d7:
                    fd:5c:39:a6:40:e1:00:40:13:90:12:e8:87:2f:94:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.97.0/24
                IPv6:
                  2001:67c:568::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57533

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:a8:bc:b4:58:ce:22:ff:95:c1:cc:a9:b3:39:47:e9:1e:
         96:63:84:65:b9:59:5b:1f:7f:35:a2:27:dd:46:d7:a2:27:f9:
         c5:29:96:32:24:22:bd:cc:ab:bc:44:7c:29:b3:0f:cc:c3:99:
         3e:40:26:1b:9c:66:48:44:52:04:b9:b8:ce:b6:28:f0:de:c8:
         36:fb:b0:32:5d:01:30:9e:9c:ae:02:99:f2:4e:3d:1b:22:b8:
         72:84:67:24:93:5e:65:49:22:4f:a7:1d:f5:bd:d9:60:7f:f9:
         7b:20:fa:0b:a7:b5:eb:68:63:ad:c7:3d:b6:91:38:de:89:6e:
         d7:cb:da:e2:a5:35:8e:dd:c1:e3:c0:48:21:fc:ff:6d:5f:e8:
         52:75:86:b3:6a:9b:86:68:0b:cf:ec:e5:ae:30:2a:07:d4:2e:
         4c:5f:ac:c4:6b:4a:13:58:24:12:25:4b:9a:89:aa:dd:63:9e:
         23:a0:80:5a:b3:05:9f:30:c1:a0:88:8a:ac:88:81:88:1c:6b:
         85:aa:d9:54:96:e4:fd:b2:45:30:09:55:d3:03:20:96:7c:f3:
         a5:ec:12:50:f5:c0:62:b4:97:01:6c:c1:ea:8d:e7:69:b5:d1:
         b7:2a:64:be:8f:a6:70:7c:dd:4e:75:53:d8:70:c5:93:65:5a:
         08:0e:0e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----