Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
File:                     0IpNevM5v1JVcjk3VdHPszzdta0.cer (raw, json)
Hash identifier:          f7IIa8tnT+BqtnCc37xlccpjUtXWwCsMSUXOaT2ffwQ=
Subject key identifier:   D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444F01BFECCA34F06AE6C651184E4C1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199128
                          IP: 151.236.240.0/20
                          IP: 185.42.36.0/22
                          IP: 2a04:8d00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:f0:1b:fe:cc:a3:4f:06:ae:6c:65:11:84:e4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:52:ef:88:bb:2e:58:cc:93:e4:a7:4b:c1:
                    6f:9a:d2:d0:54:63:6b:6c:d9:51:2c:8f:93:96:2c:
                    95:f6:70:e2:e4:31:29:06:a5:76:0d:2e:6e:b6:26:
                    4e:94:25:b6:ac:1f:44:94:11:90:f7:7f:cc:86:98:
                    e9:61:5c:59:db:bf:59:ce:f0:c4:2c:4a:d3:77:db:
                    32:e9:5c:df:db:0a:4b:3a:6b:c6:41:9d:30:f6:f1:
                    14:1b:03:c2:f2:7d:28:d1:83:44:71:c8:37:03:e3:
                    cc:04:81:06:6f:78:06:de:f1:e3:b6:33:dc:5e:62:
                    ed:dd:e4:60:19:49:9e:e7:26:ea:3c:dd:bc:52:db:
                    d1:91:c5:98:45:c2:02:61:5e:30:77:88:d0:92:95:
                    ea:75:be:f2:1e:cc:83:45:15:8f:be:79:b5:b2:04:
                    b8:76:07:b3:f8:2e:de:40:8a:00:7f:00:64:5b:65:
                    a8:8c:d3:d6:50:e8:d7:f0:ba:8e:ee:11:be:1b:a7:
                    df:a8:d9:a7:2f:05:da:f7:51:bc:48:86:c3:cb:5c:
                    70:c7:89:5e:93:55:bf:77:18:ed:69:41:c1:d6:ea:
                    cb:27:66:27:04:69:bc:3e:c9:f8:69:fd:69:6c:c7:
                    0c:cb:c9:99:ef:50:69:d4:8a:cc:36:86:54:ae:4f:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.236.240.0/20
                  185.42.36.0/22
                IPv6:
                  2a04:8d00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199128

    Signature Algorithm: sha256WithRSAEncryption
         7a:8e:51:cb:2b:fd:69:ba:91:24:83:87:7b:91:6d:1e:f6:96:
         87:59:86:3e:43:7b:1d:f0:b5:ae:cf:17:99:4f:3d:b3:81:d8:
         03:a1:11:51:cf:13:1c:ed:bf:0e:71:0a:6c:c8:0e:a1:9f:45:
         46:d7:3b:60:2a:ef:bc:f1:ad:51:7e:61:19:36:ee:95:53:89:
         3d:ad:b8:51:77:99:af:a0:16:b4:98:29:78:df:8e:b9:66:ff:
         1d:93:14:b3:2e:29:68:3a:1b:d5:ae:64:fd:3e:fe:e9:0f:f8:
         93:e7:8e:3d:01:2b:a7:26:ba:1f:fa:b8:55:00:7a:5b:38:21:
         b2:b4:22:12:84:58:4b:4c:00:91:d2:c9:e3:f4:73:fa:2f:e1:
         5d:9c:98:02:c9:2c:3e:0e:07:ea:21:9b:ba:c4:73:c6:57:d0:
         d2:48:96:77:51:5b:f7:fa:ae:76:94:ec:be:ce:bd:ca:0b:67:
         df:42:3d:4b:45:bd:37:5c:8e:8a:06:ff:82:2e:b3:48:4d:9a:
         79:5f:c5:25:c3:a3:37:74:06:06:f9:49:d2:30:30:dd:b6:38:
         1a:2d:b4:bc:94:58:6d:35:e9:30:38:4c:09:0c:de:af:fb:ce:
         4f:98:bc:a1:91:71:60:d5:47:9a:24:4f:2c:ba:93:c2:12:58:
         14:55:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----