Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2VYH_yEnTNoubzTOaXbIhQXd4tU.cer
File:                     2VYH_yEnTNoubzTOaXbIhQXd4tU.cer (raw, json)
Hash identifier:          gY0oyS1YVqW19q6WWnV29VmSE4F0xYEDT6nAxeB5B0M=
Subject key identifier:   D9:56:07:FF:21:27:4C:DA:2E:6F:34:CE:69:76:C8:85:05:DD:E2:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274879BB934F222D361B3668FB53ADFA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212454
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:79:bb:93:4f:22:2d:36:1b:36:68:fb:53:ad:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d95607ff21274cda2e6f34ce6976c88505dde2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1e:69:7e:7a:9f:bd:2d:6c:ae:79:1b:72:68:
                    ab:eb:fe:ad:eb:43:2f:44:a1:e8:3f:a1:f6:ad:cb:
                    47:17:a4:51:fa:cd:b5:aa:a7:c4:18:aa:17:4b:50:
                    a6:2b:02:ab:59:0e:09:17:54:bc:f6:31:2f:6a:52:
                    71:0e:47:e1:49:bb:e9:06:46:3b:ed:11:e2:6d:3a:
                    2a:9e:0b:11:a0:02:c1:7a:01:94:fa:2f:63:45:e4:
                    17:0a:48:2e:bc:de:a7:0a:91:f3:2f:d1:9c:d3:4c:
                    94:a8:2c:eb:8f:92:95:40:17:52:2c:51:59:26:40:
                    d2:f1:c7:5b:b4:3a:97:38:d5:37:42:cc:2a:89:86:
                    15:82:07:5a:53:c1:69:ee:14:c7:e6:a4:60:05:18:
                    c2:fd:97:3f:94:0a:25:55:ff:3a:e5:6d:d6:19:0d:
                    8b:a9:3e:9d:1e:45:62:ee:ab:c2:3e:79:a4:c5:71:
                    4a:dd:da:04:0b:9c:af:d4:37:dc:68:16:32:6b:f3:
                    74:e4:7f:54:d6:30:70:b8:32:3f:c9:b1:bd:69:f7:
                    1d:23:62:03:dd:fd:99:55:a0:24:8a:9d:f8:80:6a:
                    d1:0b:e1:f3:d0:66:04:74:30:9b:11:ec:f6:59:71:
                    8b:17:37:e5:25:cc:6c:0d:4d:1f:a1:96:02:45:a0:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:56:07:FF:21:27:4C:DA:2E:6F:34:CE:69:76:C8:85:05:DD:E2:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212454

    Signature Algorithm: sha256WithRSAEncryption
         31:27:2b:69:d1:b4:49:a5:8f:51:63:a6:f6:2f:51:06:fd:a8:
         44:20:6b:fa:ae:a8:ae:dd:50:9e:74:de:fa:d3:11:f4:bb:fd:
         94:78:59:e6:b0:ae:14:58:47:b6:f3:77:b7:96:33:87:7d:ca:
         1d:2f:69:59:8b:71:8d:04:b1:5b:28:d1:67:df:be:b3:4b:77:
         c1:33:fd:85:a8:33:33:8d:22:7a:ac:02:90:55:b8:08:a8:12:
         d2:04:c0:30:67:38:f1:99:38:48:80:0b:20:83:ad:54:81:2b:
         85:d3:03:68:dc:e5:6f:e9:a8:c1:55:88:f6:cc:04:9a:af:ef:
         29:4d:66:c8:63:a2:91:ba:0e:a6:ea:9e:f2:2a:09:3c:74:db:
         e8:a3:e7:84:c3:b0:2b:5e:70:09:a8:16:84:88:5d:5c:14:63:
         27:36:34:30:5c:20:55:00:02:0c:35:2e:a8:8b:ba:d1:bc:ed:
         57:e2:d8:50:e3:c7:ee:ac:3b:ac:6a:91:f6:41:4b:3a:a0:92:
         d3:95:a8:06:ea:f4:8a:22:a6:9e:7f:27:43:41:b8:12:bf:8c:
         5e:21:5c:ea:f1:fd:da:74:32:d4:52:1c:10:27:8d:d2:ed:54:
         10:cc:eb:84:7e:6c:8d:32:30:13:87:f0:79:28:6f:3e:fe:2b:
         fc:62:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:46 2025 by rpki-client