Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
File:                     GYC7us-p483M9sDpNTYaerJ9oU0.cer (raw, json)
Hash identifier:          pCC121yXf6H9Z5a8xRe57mVP3xN5c+kxxHTxHCqbfec=
Subject key identifier:   19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428274C7F5C3132E643E73BE8915D936F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:54:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12439
                          IP: 193.41.245.0/24
                          IP: 193.41.247.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:27:4c:7f:5c:31:32:e6:43:e7:3b:e8:91:5d:93:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:54:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:34:f1:37:e7:70:44:9d:d6:a1:90:28:08:
                    1b:40:28:4c:99:9a:8b:89:b4:5d:8e:bf:0e:0b:56:
                    56:9e:60:7f:15:fd:08:3b:7f:41:ad:ce:f0:44:65:
                    23:d1:5f:92:90:7d:9e:cb:af:a4:d1:5c:9e:08:2a:
                    9a:b3:f3:87:9f:77:59:c9:d1:99:a5:72:b5:49:86:
                    1e:06:a0:e5:16:10:c2:d3:34:bd:cd:73:a6:ce:bb:
                    c9:81:ee:a8:db:ba:12:1b:f0:e2:06:b4:0b:4d:4c:
                    54:55:b5:f2:b3:a2:8e:4d:4e:e2:20:c0:28:34:ec:
                    c6:f0:b3:9b:a2:d4:15:01:4d:cc:a4:f8:1e:86:0b:
                    6c:0e:ae:a0:aa:1a:85:76:2b:1d:24:ab:97:35:3f:
                    b9:6a:63:6d:26:67:7b:c1:6a:8e:1e:7d:4e:8d:ab:
                    b8:0e:c1:65:95:2c:44:bc:a5:98:eb:93:7f:ed:b3:
                    d6:fc:5a:96:13:f1:c1:09:aa:37:26:1a:37:0b:9d:
                    4b:68:ab:0c:60:dd:49:d3:3d:c5:13:12:39:24:12:
                    76:86:6e:4b:1b:9b:47:bf:10:05:6d:48:15:3b:ba:
                    db:d0:2e:b3:82:0e:70:20:09:53:13:51:5a:63:63:
                    c9:26:e0:b9:c9:33:8c:6c:33:ed:9e:0b:b3:b0:c0:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.41.245.0/24
                  193.41.247.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12439

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:7e:cf:b7:51:a3:f7:54:aa:9d:a4:50:c1:62:fd:a1:72:
         9f:a4:e4:af:7a:fd:68:03:ce:c7:9c:26:5a:a6:a1:ae:5a:6e:
         81:17:84:57:4d:bb:d2:68:81:12:0d:83:30:59:fa:da:04:0c:
         98:dd:16:ec:58:82:ba:33:56:d7:e9:2d:4c:17:24:eb:c3:6c:
         37:88:6d:08:43:bd:d1:fb:19:06:47:10:3a:fb:c0:1a:b5:28:
         40:cd:f2:79:bb:91:4b:af:5a:b3:6a:a6:20:6f:7c:3f:72:53:
         e4:6b:72:5f:e1:af:69:e3:cd:c4:40:db:f4:04:1c:da:09:0e:
         16:a5:4b:8e:d6:71:94:de:7e:0a:76:95:ff:67:e2:ca:f8:86:
         a6:5b:45:3f:7a:67:b4:bb:3a:7d:c9:a8:39:6b:82:d3:ab:12:
         eb:63:0d:c5:b6:47:72:d2:2d:28:ce:d2:12:3c:ec:b9:5a:1b:
         87:4f:c9:4f:eb:39:e9:bd:0b:8b:6b:41:6f:ea:74:40:52:30:
         68:fa:a4:65:44:95:28:82:38:23:c2:10:45:2c:79:87:f9:58:
         1f:e8:f5:3b:aa:2a:21:e1:43:f3:56:85:63:e2:1e:c4:ac:85:
         ee:9c:e5:ca:7d:9a:98:c3:95:90:6c:ab:a2:3a:c1:06:a7:79:
         55:e6:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:51:58 2025 by rpki-client