Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
File:                     Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer (raw, json)
Hash identifier:          70PDPq1Fk8UpCIEEbf1urwtVqqK06nSCcqtuu0rFAMs=
Subject key identifier:   61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444B2258ADB481F8272D4C829F32B1A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 38938
                          IP: 91.240.164.0/24
                          IP: 185.41.108.0/22
                          IP: 193.33.58.0/23
                          IP: 2a04:8900::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:b2:25:8a:db:48:1f:82:72:d4:c8:29:f3:2b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f4:1b:95:15:eb:b8:93:88:1e:23:dd:09:f3:
                    23:41:e8:74:c3:ac:56:e5:68:ee:55:40:08:c2:d6:
                    f1:bf:e2:af:97:c4:ee:2b:a8:e6:cb:16:5b:be:d8:
                    d7:3d:9e:07:1f:d4:e6:bc:7e:62:02:28:a3:74:33:
                    1b:71:b3:4f:a5:39:7c:de:bb:0b:e2:db:f2:75:e9:
                    f1:63:c8:03:24:8c:1f:b6:f9:16:a4:51:9f:fa:c8:
                    11:ef:3d:ea:12:c3:b6:6d:2d:19:f0:7d:b3:44:e4:
                    a8:2b:e8:f1:bb:a3:41:64:c5:63:d4:1b:cc:be:5c:
                    76:7b:40:f7:44:e6:ce:a1:c4:cf:b8:3a:51:17:49:
                    c9:5d:07:75:b1:4f:70:78:c7:d5:8d:fc:3e:6c:82:
                    c2:0b:42:28:1d:f7:89:17:75:47:2f:a1:4e:8a:29:
                    6c:45:83:63:e5:b1:0d:2e:f7:ba:a9:4c:1d:b4:94:
                    87:6d:c8:db:fa:77:16:40:3e:0d:b7:d2:9b:43:be:
                    f4:91:5e:24:e7:2c:54:3a:17:8f:28:4f:ff:c9:14:
                    95:00:5a:85:1e:fc:76:c4:39:a4:a2:17:52:a3:7f:
                    b2:c6:97:3a:14:fd:50:0d:6a:b4:e9:71:eb:f8:90:
                    8a:ef:0d:b9:68:03:69:68:aa:04:a6:ca:6d:5c:ba:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.164.0/24
                  185.41.108.0/22
                  193.33.58.0/23
                IPv6:
                  2a04:8900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38938

    Signature Algorithm: sha256WithRSAEncryption
         87:97:b3:ed:80:d9:42:8d:4f:c6:05:ab:ed:eb:25:ca:67:b1:
         cc:b1:af:94:56:b0:bf:0a:19:c7:80:78:48:e0:03:de:7e:23:
         c4:61:6f:a0:1a:7b:78:63:d6:ac:d6:bb:22:58:28:70:12:12:
         19:18:cc:dd:12:27:35:0c:dd:89:3b:ff:68:2a:b6:d2:3c:47:
         c0:d8:5d:4f:1a:0a:94:63:f6:11:70:55:b7:24:82:c4:36:15:
         09:fa:60:3b:b8:8d:cc:73:4d:ec:e6:bd:16:41:b8:14:7d:19:
         0d:e0:bf:38:24:5e:84:e2:05:ff:d6:a0:e7:d3:19:4d:27:1e:
         dc:f8:cd:e4:ec:14:a0:ee:ed:32:75:81:38:46:9b:62:1d:72:
         8e:d4:4c:3e:d3:a3:07:bb:6c:7a:87:0c:b5:3e:2f:05:ff:ee:
         98:d1:3d:65:b2:15:9b:0e:17:8b:36:03:2f:03:c0:65:7a:28:
         f2:eb:cf:8c:cd:b0:46:78:7a:88:05:0e:fb:89:b3:34:2b:b4:
         d9:1d:d4:c8:d2:a6:9c:fa:6a:57:47:aa:3c:85:88:51:a2:90:
         6e:78:0c:79:41:4b:96:45:f2:46:25:df:2e:ab:b6:d2:43:24:
         b3:42:82:af:30:a7:08:38:b2:d7:bd:32:8a:33:9f:e0:a1:19:
         e4:4d:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:10 2025 by rpki-client