Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer (raw, json)
Hash identifier:          4IOHlqfrYXYyIaVL1X6B3HL+NAQdtRQSYPyGll2ukJo=
Subject key identifier:   D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F56AC840EDD5CCED1B305CCA1DDE4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12509
                          IP: 91.194.176.0/24
                          IP: 194.153.79.0/24
                          IP: 2001:67c:368::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:56:ac:84:0e:dd:5c:ce:d1:b3:05:cc:a1:dd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:7c:e3:fd:cb:e4:9d:b6:f9:6e:2e:00:b3:
                    1f:f4:14:92:23:2c:c9:00:02:50:13:ba:88:d0:b3:
                    60:c6:ea:80:ad:b3:21:fa:22:47:bc:c7:e4:2a:7b:
                    61:0a:5c:b3:d5:17:ac:2a:64:b2:48:93:51:11:45:
                    39:49:9c:73:f0:cf:5d:c3:08:df:63:04:6a:28:01:
                    b1:92:b4:c0:1f:82:e2:5f:ea:93:c7:fa:d9:4b:8b:
                    74:50:c5:5c:09:e8:dc:94:2b:f2:df:df:14:f5:6f:
                    44:8e:ff:f0:f9:7b:96:ae:ef:cf:d0:29:c5:8a:10:
                    de:df:76:6b:62:9f:11:ce:cf:83:7d:0b:82:68:fd:
                    62:78:90:4d:5e:50:db:6b:64:54:49:d2:08:2d:a9:
                    a8:dd:9e:32:23:dc:ea:10:c0:38:f0:cd:0e:21:ac:
                    8a:95:67:1e:84:fa:db:c4:3b:98:e4:5d:18:26:68:
                    20:eb:af:cd:ab:5e:87:e1:ef:35:89:a5:5b:34:a8:
                    82:cb:45:b8:13:bb:d4:9a:83:ba:4a:d0:b6:42:b4:
                    06:2d:4b:23:35:2f:1c:4d:ea:16:04:39:ee:a4:3c:
                    a0:6d:40:2c:03:2c:d7:75:d1:00:39:fc:ee:bb:73:
                    3f:21:61:ff:3a:d0:29:79:96:a6:9b:c9:88:ea:b5:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.176.0/24
                  194.153.79.0/24
                IPv6:
                  2001:67c:368::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12509

    Signature Algorithm: sha256WithRSAEncryption
         1a:50:d1:2f:97:02:5a:0c:88:3e:e7:24:1f:4e:95:75:ce:ff:
         ee:67:82:98:0b:04:59:34:d4:01:20:d6:8f:c9:1f:9d:ad:94:
         02:b7:e4:08:80:57:16:9e:a5:0c:75:fa:0e:66:c1:31:ba:a4:
         d5:0a:91:dd:5a:60:0e:c6:71:db:3b:74:ce:48:95:f2:c3:7e:
         4e:0f:9d:11:2f:d8:8c:20:e5:15:bf:ad:b7:94:dc:60:34:5d:
         85:90:1c:0c:f5:27:6e:6a:12:11:0f:4e:10:45:05:10:d1:75:
         03:1a:f5:31:24:06:74:4a:62:b1:e5:91:c4:4c:82:28:a3:94:
         9a:15:74:c4:e8:88:23:e5:82:63:81:98:aa:2e:49:6f:ce:4d:
         d4:aa:66:e5:67:1a:ab:6d:f1:7b:ff:58:9f:61:c0:00:5a:ff:
         ee:31:01:fe:5f:fe:84:8c:5d:78:2a:57:16:c3:b3:03:e9:fe:
         a2:59:d5:ca:d8:0d:69:98:6c:47:7d:0c:43:37:99:a1:40:12:
         62:4b:0e:52:6a:4d:af:2e:da:be:c0:88:a9:eb:c3:f7:31:e2:
         e9:f2:e3:61:f0:b3:31:4c:95:04:eb:9b:dd:29:70:ab:94:7e:
         4e:75:af:0c:ae:14:44:81:ac:24:a3:73:ea:9a:8c:55:b3:3e:
         ad:9e:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----