Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer
File:                     JV_ylgEpdHxRvatuGDxg_3h6xeY.cer (raw, json)
Hash identifier:          p6vkeEDCAoytF0VkyDZj+EgqUZfAKwSRLDfHR6rSd+I=
Subject key identifier:   25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D92071ADE9379EF3F26B927AB45F1A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206506
                          IP: 2001:678:360::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:20:71:ad:e9:37:9e:f3:f2:6b:92:7a:b4:5f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=255ff2960129747c51bdab6e183c60ff787ac5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d4:f1:b3:60:72:69:55:de:66:37:66:69:eb:
                    2f:a4:f4:ba:ba:b6:38:75:f1:34:2a:52:70:27:3b:
                    d6:3e:82:74:38:c7:0b:86:89:ee:6b:ef:6d:60:e0:
                    d0:c8:df:98:47:e1:5a:0f:98:62:9d:8d:c7:e7:67:
                    af:38:33:b7:2c:05:01:e9:86:cf:48:22:7a:7a:14:
                    9b:fe:f2:54:27:37:de:fe:8a:5f:9d:cc:8f:bb:30:
                    06:6b:9b:17:71:ab:a8:9f:1c:78:24:ed:e1:df:1c:
                    89:c9:a4:88:82:b9:67:b5:75:7d:9a:88:8f:89:c1:
                    ca:c0:cb:41:1b:e7:05:10:16:7a:87:d0:34:b3:56:
                    b5:bc:c6:cc:34:d9:ad:aa:6d:33:07:fa:6b:9b:32:
                    08:fd:1e:1d:26:d6:a7:94:49:18:a3:b7:83:c8:94:
                    89:c2:28:16:55:d4:de:df:88:ab:e6:41:a4:fe:89:
                    51:46:c0:49:bb:d2:27:d9:f5:c6:12:69:ec:eb:a4:
                    a8:e3:b1:2e:cd:a2:31:c7:00:21:68:62:bb:5e:08:
                    a7:1d:a3:d3:9e:67:ee:bc:2b:5b:6f:b2:95:75:58:
                    41:21:d3:c7:e2:bc:6d:f2:60:40:e6:87:a6:75:1c:
                    b1:d7:8a:8b:60:02:73:91:ce:36:21:d3:05:1a:1a:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:360::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206506

    Signature Algorithm: sha256WithRSAEncryption
         57:99:b0:5f:6d:57:1d:dd:20:06:4b:10:c4:7c:40:2f:d5:eb:
         13:87:b6:55:c7:69:bf:4d:1e:8f:58:ab:17:ea:0a:15:f9:53:
         57:02:06:d0:f3:73:af:a5:95:33:8e:2e:48:0c:61:3e:97:cc:
         d7:e0:50:e7:93:ca:4a:86:08:f7:3b:27:1d:28:9c:81:23:10:
         b5:d9:86:21:8f:5e:54:fa:be:7b:23:01:5c:8b:76:81:e2:2b:
         a0:58:80:49:5b:0b:b8:26:15:71:b6:e0:78:eb:aa:27:73:78:
         0e:61:c4:d6:01:06:92:f9:42:1a:f0:96:09:ab:82:1c:75:60:
         8e:2a:eb:5b:08:6c:95:16:36:d9:74:b5:ce:49:45:e6:b1:8b:
         45:51:4b:ee:e8:9d:96:74:4e:a3:74:7c:77:71:85:f7:29:47:
         9c:ce:29:78:3b:44:eb:e0:43:cb:b0:ac:2b:1f:28:8e:be:10:
         1f:0a:36:da:1f:ad:ab:f6:65:af:b9:13:0b:02:6c:46:02:ed:
         2e:79:bf:a4:44:f6:d2:f3:23:13:6d:f3:3a:37:62:84:30:51:
         76:18:85:30:56:07:5b:5a:ae:9b:37:c1:e8:d2:59:c7:3a:51:
         0b:b5:9c:53:29:71:2b:64:df:d0:77:11:29:9d:4f:89:37:8d:
         d2:96:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----