Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
File:                     1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer (raw, json)
Hash identifier:          aysyTi96TY5NDIW6VS1oNXmL+DYcup5vF9vHFGyzS6Q=
Subject key identifier:   FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B58E58F9D323CDDB6D84ED1E6570AA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197973
                          IP: 128.140.232.0/21
                          IP: 2a02:6b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:8e:58:f9:d3:23:cd:db:6d:84:ed:1e:65:70:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:b8:c5:be:9d:77:93:b2:0f:d8:83:c0:26:
                    59:ce:03:ba:6d:ed:27:0d:cc:30:33:90:b2:ae:e1:
                    d1:36:eb:22:d0:94:44:f3:82:6c:35:92:27:a1:0f:
                    12:eb:64:13:29:aa:77:dd:4c:9a:0d:4c:1d:6b:d2:
                    99:7d:93:9a:ef:09:79:4e:a2:52:71:61:c8:5d:af:
                    38:6e:b3:66:d5:bc:a7:3c:d4:20:41:bc:63:a4:34:
                    3b:3e:ee:a6:06:ff:8e:9c:d8:5d:a4:fc:1a:ae:b8:
                    40:94:e0:6e:17:ec:64:9a:24:82:10:e9:2d:e3:a5:
                    23:6d:3b:09:3c:89:77:f6:ea:fc:03:9c:8f:6f:92:
                    b5:5f:c4:38:34:e1:fc:17:ef:f1:b8:b3:5a:0f:d2:
                    cb:9b:49:5c:1b:93:90:50:b9:44:45:87:b4:b6:41:
                    59:65:33:24:11:3a:29:2a:ea:df:a7:69:6b:00:93:
                    58:40:e7:70:2c:40:ae:6d:44:2d:98:cd:01:a1:53:
                    49:c7:a5:2f:93:72:70:7b:89:05:84:c0:89:a9:19:
                    0e:32:ff:67:24:b4:c6:83:d1:7d:62:95:63:e9:18:
                    ab:45:4b:03:b6:79:6c:6f:f0:6d:c3:2d:96:20:45:
                    aa:0a:36:2c:c9:13:fd:0e:a3:c5:b0:ec:cb:af:eb:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.140.232.0/21
                IPv6:
                  2a02:6b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197973

    Signature Algorithm: sha256WithRSAEncryption
         2a:58:66:92:06:ec:d0:86:60:5a:36:34:e0:fb:71:65:8d:b4:
         2a:05:22:e7:55:88:9e:44:90:1f:21:5b:ae:d6:cd:17:6f:31:
         b9:7c:4c:7c:2c:a5:bc:fd:6d:cf:30:71:11:50:6f:07:2f:51:
         5b:99:e2:08:56:ff:89:58:2f:33:51:57:f1:d1:82:8d:b5:b5:
         80:f7:9b:17:b3:64:7a:2c:17:43:94:cf:6c:56:94:e5:a0:a1:
         92:86:87:3e:fc:ae:20:07:8b:48:99:d8:e1:aa:4d:c6:0e:1a:
         95:9a:71:ea:bf:bb:61:4b:7f:19:a4:09:24:26:55:21:f1:5d:
         01:ff:37:23:df:02:be:5d:01:b7:d9:86:59:15:d7:e6:83:48:
         80:7b:e0:5c:28:18:c8:b7:d0:c4:3a:61:cf:76:9c:88:4a:4b:
         67:74:1c:d0:c5:1a:cd:57:bb:b8:78:da:09:83:db:19:d6:0a:
         9e:36:a8:88:8d:e1:39:3f:3c:d8:80:3a:af:6e:3b:a8:fc:74:
         dd:b3:f5:08:35:3e:fa:a7:89:68:d7:67:fc:af:3d:68:e2:86:
         1b:92:12:e8:18:be:f4:89:68:18:44:61:fb:15:a5:16:50:74:
         1f:2d:2d:5d:cb:5c:ad:8c:e1:df:73:39:41:dc:72:e3:1d:b2:
         1e:d5:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----