Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
File:                     Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer (raw, json)
Hash identifier:          zrDPXIDtG3lkqwFSBGt6HmjNgenSMibhIue0qGI9tBo=
Subject key identifier:   63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258E9C7227DC32A26F583CF4699DE7D3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44882
                          IP: 109.230.128.0/18
                          IP: 2a01:98c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:9c:72:27:dc:32:a2:6f:58:3c:f4:69:9d:e7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e1:73:71:0a:af:0d:b4:df:82:9c:04:01:53:
                    8e:ff:a3:81:46:5e:5f:ef:54:47:63:c6:4a:dc:30:
                    72:2b:1c:10:45:06:64:e0:8f:0d:5c:7f:c0:32:25:
                    a7:89:aa:59:14:f6:bb:76:31:82:6a:b1:ea:5d:1c:
                    2e:d2:b0:b9:eb:a3:05:b2:8d:de:fa:48:5a:d2:d4:
                    b7:77:68:1b:d7:15:1c:01:6f:47:e4:ef:23:64:2f:
                    09:d0:da:2b:50:60:1b:0c:7a:e8:c1:00:e4:39:ea:
                    cb:8b:31:a6:cb:c1:8b:4d:d3:ea:f3:00:07:d3:66:
                    6a:5e:fb:1e:00:8c:01:f2:ab:7c:cf:97:d3:6f:8f:
                    c4:e3:89:a7:34:54:c6:c6:b8:d8:e9:5f:ba:92:f2:
                    22:74:f2:58:f1:72:3b:7c:27:bf:65:c7:39:d3:36:
                    b0:11:6d:4c:42:d4:4e:35:f2:49:6b:96:b0:15:98:
                    f1:4e:8c:2f:36:e0:ee:7d:20:11:b3:08:10:f5:83:
                    de:b7:b9:f1:3e:af:31:dd:10:79:b2:0e:8a:7e:6e:
                    64:a8:8f:dd:73:3b:15:a5:90:c4:6b:c0:d1:aa:d2:
                    b3:98:29:87:b6:e7:bb:cd:31:c2:ac:ec:05:57:c4:
                    67:6b:d4:55:56:b9:b9:73:4a:74:c1:c0:b8:2e:e9:
                    56:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.230.128.0/18
                IPv6:
                  2a01:98c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44882

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:6f:90:4f:ab:71:4e:2c:24:2e:49:21:e5:9b:2f:ec:b6:
         14:a8:f2:88:55:28:5a:59:5a:66:08:60:6c:ca:22:08:a2:7a:
         5a:d3:59:6e:e2:88:1d:8e:55:64:3a:ff:1b:97:09:a9:3c:04:
         91:fb:29:4e:4e:6f:9d:c1:63:2c:0e:88:5c:49:42:72:8e:3f:
         04:50:86:7a:01:d3:9a:e4:69:f8:7b:9b:ac:13:4e:60:32:d7:
         5c:0c:7c:3e:e9:1c:0b:57:5c:f7:c9:0b:8d:fc:1e:91:4c:bf:
         57:db:78:3d:08:9d:50:13:80:e0:6e:2e:64:e6:b1:dd:85:78:
         43:38:fe:6a:b6:6f:e3:10:d2:f0:29:fc:f1:26:62:c7:30:8b:
         ad:b8:96:d5:fd:3a:e3:17:18:e8:df:a8:0f:3f:0c:35:a8:f5:
         33:a0:02:03:05:24:01:b4:82:cf:e4:d0:82:c3:db:06:a5:c7:
         98:21:29:72:83:6c:06:e8:35:c2:68:aa:28:cd:db:34:b9:b0:
         a5:2b:95:82:4d:6e:35:ce:69:b5:77:87:1d:94:17:ff:2c:46:
         38:33:ab:2e:41:ee:c9:d3:6f:fb:34:eb:34:4f:7f:18:c7:be:
         0b:cd:31:95:c2:e2:53:f5:c1:12:c8:a4:cf:c8:98:87:a4:0d:
         fd:23:2c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----