Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
File:                     ykeSHkQwUhp3J4iME7x7jhBMvb4.cer (raw, json)
Hash identifier:          ncJC9KCILp/oMt+/StXSmd8+hzckoJ/viyiS3JFjCJI=
Subject key identifier:   CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A2C9F084C89A58F8BCEC4091ECB46
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203082
                          IP: 185.251.244.0/22
                          IP: 2a0c:6cc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:2c:9f:08:4c:89:a5:8f:8b:ce:c4:09:1e:cb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:07:1f:47:fd:ec:ee:70:82:b1:df:71:a0:
                    5a:b4:49:5a:34:83:69:e8:59:32:89:49:87:83:f3:
                    a4:b2:51:db:83:e6:d6:e7:de:d1:c1:9b:ea:c3:cb:
                    a8:86:5d:c4:1c:c9:31:9c:e0:4e:28:ef:66:be:91:
                    03:f0:45:f4:94:14:31:f6:df:09:1e:15:7b:c4:4b:
                    9b:00:77:d5:8a:29:c0:2b:2e:d1:24:94:17:5f:ea:
                    41:2b:89:c7:1b:d7:04:af:31:c2:82:17:b7:86:67:
                    2d:4b:c1:06:75:79:c2:1d:b0:fd:81:46:4d:7f:4c:
                    bd:4f:62:01:d0:f1:82:ce:79:8b:84:67:a1:c9:3d:
                    16:f5:2a:54:2a:59:c8:33:be:a5:37:67:d9:75:a1:
                    73:fd:36:45:46:d7:20:9c:67:cb:e5:13:2f:d0:0b:
                    80:85:54:02:de:9e:19:43:46:3f:79:99:2c:42:d8:
                    54:13:cd:84:55:71:d5:29:f7:b4:f9:4a:2d:be:34:
                    7a:ef:a4:f4:c3:e0:62:c5:a1:bd:a2:ff:4f:72:36:
                    d7:e1:b3:ee:02:2d:52:58:03:b5:66:86:61:f0:e7:
                    bb:7e:62:de:4d:00:7e:7f:53:4c:e4:25:c7:1a:ed:
                    3e:84:10:16:53:52:3a:48:ca:6f:5c:6d:a3:3b:9b:
                    be:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.244.0/22
                IPv6:
                  2a0c:6cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203082

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:d4:ae:e7:ab:ea:54:89:fc:81:52:d2:f9:e3:98:ac:be:
         9e:06:71:b0:94:b4:ba:27:ef:68:0f:85:45:98:78:0b:c9:94:
         7c:61:da:be:ab:11:90:0a:78:eb:0c:f4:4b:9f:7d:57:3c:c1:
         73:d7:11:6e:28:bb:1f:db:da:5a:73:03:d8:80:6c:62:40:85:
         fe:05:e4:bf:ab:d2:45:be:77:e5:52:eb:e1:fa:07:b2:df:2e:
         40:a7:68:3d:09:9c:2b:bc:15:4d:3d:3c:bb:cc:e5:7f:94:b0:
         02:e2:75:10:58:f2:15:c0:88:6d:17:38:18:db:b4:45:24:3b:
         9e:4e:2b:5a:13:27:41:bb:aa:fb:82:ae:46:b7:06:9e:96:b0:
         95:58:00:47:69:40:02:7b:d9:6d:32:36:94:20:9f:88:4f:da:
         64:63:da:1d:22:29:68:90:0b:ff:ff:e2:5e:c8:dc:67:0c:97:
         ba:c3:bc:f1:6a:7a:91:63:6c:ad:a7:57:6f:12:e3:63:57:b1:
         a7:5f:70:72:b0:35:2b:ca:cc:33:6f:8b:a5:df:84:a1:fb:a7:
         d5:07:08:4d:c1:c5:77:0c:91:b4:27:f9:3a:18:8b:31:00:19:
         b7:3f:ef:d1:cd:ac:fc:e9:86:55:5a:cb:26:df:25:7c:91:ef:
         7b:bb:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----