Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
File:                     eY97H9gCs9xqvXpc2nhqYxHh1j0.cer (raw, json)
Hash identifier:          ATPZ5c2TMNoSOBkZGNIGF0F/Mz/uYAP5zO2rGTLJGVA=
Subject key identifier:   79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067E063F722AC403DD3F20DA3F0B876
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210000
                          IP: 31.41.34.0/24
                          IP: 193.34.193.128/25
                          IP: 2001:7f8:135::/48
                          IP: 2a12:3fc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:e0:63:f7:22:ac:40:3d:d3:f2:0d:a3:f0:b8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:9c:5b:3e:99:21:d1:d5:69:08:c1:ee:48:
                    b4:32:cf:31:f7:fd:19:b9:15:bb:f2:85:de:e9:7f:
                    09:f7:c0:fb:a1:ed:f2:9c:6c:8d:30:e0:af:0b:cc:
                    f3:97:3b:16:63:45:4c:e3:3a:d2:94:c9:8d:96:b1:
                    ee:61:1f:96:7d:9c:6e:d5:73:ba:ad:21:a9:62:6b:
                    ac:8c:1c:24:7d:8a:92:6c:46:ce:6b:33:cd:a4:00:
                    cf:46:e1:b3:c6:49:7c:40:ea:8f:98:ad:24:b4:71:
                    81:98:30:07:5b:b9:d6:93:89:fb:b6:b4:d5:8c:58:
                    91:c4:47:bb:e9:17:df:f5:15:7e:fb:41:d7:53:45:
                    16:5d:e1:13:c2:31:9b:f7:d9:88:33:72:80:d5:fc:
                    81:ce:82:53:f2:dc:0e:2b:f5:75:17:71:9c:bc:a5:
                    55:a3:36:f6:3d:51:98:7a:a1:c4:32:a7:24:2a:76:
                    11:7c:1a:c6:cf:6e:a8:a8:5c:81:c2:bd:3c:8b:60:
                    2e:96:67:e2:57:55:e4:7a:65:62:7e:04:af:b2:b3:
                    81:40:38:9c:59:e1:3a:ab:8d:cc:21:64:79:a0:5a:
                    94:fa:02:8e:25:e6:d2:04:0e:7b:3e:09:2b:9a:b3:
                    0e:f9:83:ae:06:0e:4e:30:0d:4c:e2:20:50:72:ab:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.34.0/24
                  193.34.193.128/25
                IPv6:
                  2001:7f8:135::/48
                  2a12:3fc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210000

    Signature Algorithm: sha256WithRSAEncryption
         93:30:11:64:e7:66:cc:28:ab:c6:0d:bf:62:33:c3:c8:ac:c6:
         10:bf:68:6b:2e:d1:d3:c0:e6:c0:62:9d:d2:8a:96:f5:64:93:
         f1:e9:69:2d:1d:9a:0e:06:28:77:66:4c:f1:3a:6c:f0:99:04:
         54:74:37:7a:75:87:8e:e1:2d:b1:b2:71:9f:92:66:02:1a:89:
         b0:13:cb:68:de:71:60:f6:c6:e3:85:bb:07:bc:1a:3c:b5:c2:
         21:5b:bb:91:0b:16:15:f1:33:1e:69:86:4e:a0:1c:bf:e7:3a:
         e1:65:70:45:07:f6:03:09:6f:23:9c:cc:4a:96:3a:50:1b:87:
         ce:ef:e9:62:1c:73:e0:61:23:8d:f3:4b:a6:d9:1a:f2:b7:96:
         0c:c3:e8:ad:53:e8:b8:71:2f:d7:7d:46:84:33:59:35:15:32:
         79:ee:e2:6a:49:0b:6c:6d:8e:ea:24:0a:7b:90:54:f7:29:41:
         5b:24:06:0a:77:7a:2e:00:ea:f0:49:0c:18:21:91:38:02:47:
         93:18:0f:2a:c9:55:87:c6:ac:c2:d9:0b:60:e9:d0:f3:19:e6:
         74:a0:c6:c0:b8:68:08:13:88:ab:15:42:32:0a:e7:29:73:e2:
         8a:94:44:cf:68:d7:56:31:db:02:4c:ac:54:7e:1f:db:c5:7f:
         6e:67:29:6d
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAZQgZ+Bj9yKsQD3T8g2j8Lh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OThmN2IxZmQ4MDJiM2RjNmFiZDdhNWNkYTc4NmE2MzExZTFkNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j2cWz6ZIdHVaQjB7ki0Ms8x9/0Z
uRW78oXe6X8J98D7oe3ynGyNMOCvC8zzlzsWY0VM4zrSlMmNlrHuYR+WfZxu1XO6
rSGpYmusjBwkfYqSbEbOazPNpADPRuGzxkl8QOqPmK0ktHGBmDAHW7nWk4n7trTV
jFiRxEe76Rff9RV++0HXU0UWXeETwjGb99mIM3KA1fyBzoJT8twOK/V1F3GcvKVV
ozb2PVGYeqHEMqckKnYRfBrGz26oqFyBwr08i2AulmfiV1XkemVifgSvsrOBQDic
WeE6q43MIWR5oFqU+gKOJebSBA57PgkrmrMO+YOuBg5OMA1M4iBQcqvhdQIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFHmPex/YArPcar16XNp4amMR4dY9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzMwODgz
YS0xNmQ3LTQyMTItOTE5OS0wOWQwYWEyOGU1NTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvMzA4ODNh
LTE2ZDctNDIxMi05MTk5LTA5ZDBhYTI4ZTU1MS8xL2VZOTdIOWdDczl4cXZYcGMy
bmhxWXhIaDFqMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD4GCCsGAQUF
BwEHAQH/BC8wLTATBAIAATANAwQAHykiAwUHwSLBgDAWBAIAAjAQAwcAIAEH+AE1
AwUDKhI/wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNFAwDQYJKoZIhvcNAQEL
BQADggEBAJMwEWTnZswoq8YNv2Izw8isxhC/aGsu0dPA5sBindKKlvVkk/HpaS0d
mg4GKHdmTPE6bPCZBFR0N3p1h47hLbGycZ+SZgIaibATy2jecWD2xuOFuwe8Gjy1
wiFbu5ELFhXxMx5phk6gHL/nOuFlcEUH9gMJbyOczEqWOlAbh87v6WIcc+BhI43z
S6bZGvK3lgzD6K1T6LhxL9d9RoQzWTUVMnnu4mpJC2xtjuokCnuQVPcpQVskBgp3
ei4A6vBJDBghkTgCR5MYDyrJVYfGrMLZC2Dp0PMZ5nSgxsC4aAgTiKsVQjIK5ylz
4oqURM9o11Yx2wJMrFR+H9vFf25nKW0=
-----END CERTIFICATE-----