Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.cer (raw, json)
Hash identifier:          yE4OHkjiBQkpUe4fPkn1X1hScJq7b3C6T7pJ735ti10=
Subject key identifier:   CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F75D388D8B3AABDAE88B303005503
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34120
                          IP: 77.90.64.0/18
                          IP: 185.168.12.0/22
                          IP: 2a0b:5600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:75:d3:88:d8:b3:aa:bd:ae:88:b3:03:00:55:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:cb:bf:45:1a:5a:e3:b7:e7:7f:67:56:94:
                    6e:95:8d:d6:7d:85:56:56:8c:e6:fa:07:9a:08:fd:
                    1f:d4:20:08:7c:6f:fe:38:a8:86:a8:8a:f3:e1:d9:
                    40:55:01:8d:2b:1a:fa:82:c2:6b:ff:8f:22:2b:a9:
                    cc:65:23:6f:cc:95:58:0c:b9:79:57:cc:ec:0c:4e:
                    11:8d:7a:cc:b1:cc:61:a4:3e:09:5d:bb:ba:f0:ba:
                    60:88:80:c9:87:33:b2:d3:7a:4f:09:ce:07:01:10:
                    2b:a5:79:e1:72:6c:b5:fd:b4:8b:94:5b:92:df:f2:
                    35:31:f8:d5:3b:8a:f9:54:e2:27:57:b0:86:d5:98:
                    71:36:07:dd:2a:b2:df:2b:84:3b:31:d3:31:05:5b:
                    67:03:74:0e:77:00:b8:5b:af:27:d5:1b:30:0a:53:
                    2d:dc:09:29:c0:fc:90:e3:e2:7d:f8:fd:2e:8b:7d:
                    e6:c3:e9:0d:a5:ad:06:78:b2:1a:b2:77:6e:a7:05:
                    c0:85:4f:7d:32:39:bf:04:a1:46:2b:b4:83:fa:35:
                    94:c9:0c:a7:33:6a:4e:1a:37:b2:ed:9e:73:7a:99:
                    0b:a7:ce:c6:db:ef:c9:9e:01:0d:ce:61:36:f2:85:
                    c2:43:0d:54:e8:80:73:61:4a:1b:12:16:c7:a7:de:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.64.0/18
                  185.168.12.0/22
                IPv6:
                  2a0b:5600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34120

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:eb:ce:21:cf:7c:2c:70:3e:c6:67:1f:f8:37:06:39:e2:
         b3:ec:9a:eb:bb:f2:d0:17:ad:c0:b1:71:97:e2:0c:a4:10:a8:
         07:5d:59:8b:10:9b:0a:e2:61:55:ad:b2:37:86:e9:1c:65:03:
         2e:f2:a6:ff:cc:de:45:aa:66:e4:7f:00:cc:25:04:d5:00:7f:
         12:6d:55:1e:72:6b:3d:a8:73:ff:a0:87:db:b5:2c:04:5e:96:
         be:d9:97:b8:5a:1a:f6:13:08:4d:9c:b0:4c:51:d3:95:fc:ee:
         40:f3:06:2b:e1:32:ab:04:fc:8c:74:16:62:5a:19:33:7d:dc:
         b4:96:60:5a:5b:9a:81:e5:92:79:f3:dd:4d:e1:94:f8:e8:02:
         83:59:35:c1:96:dd:9c:27:7c:d6:65:02:2b:b4:b6:ee:95:17:
         9f:09:33:5e:3c:4d:c1:b2:88:f7:a8:85:eb:21:d2:bf:c2:ee:
         ac:46:d1:dc:df:c5:b1:f5:7a:4b:e6:12:5e:9e:d3:d1:4f:5c:
         fb:f4:f8:60:ee:3a:15:50:c6:55:88:7c:82:9c:4c:c4:ff:98:
         9b:2f:81:a1:8f:57:25:43:38:fb:60:7a:7e:29:a0:9e:cd:03:
         b2:f2:f9:85:79:e5:8a:94:9b:a5:a8:bb:6f:45:29:fb:64:38:
         a9:5c:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----