Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
File:                     1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer (raw, json)
Hash identifier:          FnAZN0/aU+Q8XulRZFbPegl3AqVI8Bkup+EaafNINCA=
Subject key identifier:   D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDC10747538F7B2F188F2AC95C0FC6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39086
                          IP: 195.66.80.0/24
                          IP: 2001:678:7c8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:c1:07:47:53:8f:7b:2f:18:8f:2a:c9:5c:0f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:16:06:6d:21:c2:e9:86:7a:32:bf:cf:9e:
                    3a:97:01:9c:1b:55:7d:0f:33:cb:f4:e9:bc:c8:2a:
                    a8:10:bd:86:7a:1f:a9:c1:27:1d:2e:c1:2a:b9:94:
                    fd:81:5d:8d:d7:b5:8c:82:c8:c5:ec:52:48:c9:7e:
                    4b:00:fb:5a:9d:9a:64:3e:90:43:bb:4c:20:a5:65:
                    c7:7d:9d:23:0e:6c:50:65:04:45:e6:0b:28:15:bb:
                    0f:04:77:b0:9c:a9:2f:f0:01:30:b0:e1:71:93:5a:
                    f6:dc:8c:1b:fc:3e:30:1a:df:cf:a2:b9:bc:39:2a:
                    83:69:37:16:3c:b2:6e:83:fb:90:ef:30:8d:67:54:
                    3f:ae:68:51:19:63:ff:ae:f5:4c:a2:f0:eb:f8:74:
                    1e:b6:97:54:3c:35:31:87:3a:e7:59:30:41:5b:59:
                    ab:5e:32:d3:15:65:bc:78:5d:9a:2f:2f:46:df:94:
                    37:d0:0a:c7:21:3c:54:63:ee:46:9d:c0:ec:37:55:
                    6c:87:81:52:b3:a1:f3:0e:9b:4d:f3:13:37:f3:57:
                    33:1a:bd:32:b9:19:d3:93:e5:4b:b3:df:24:1e:51:
                    d4:ba:56:c8:d3:fa:10:09:07:b3:a0:3b:d6:74:6a:
                    0d:5b:08:0c:c6:24:ba:36:76:84:0d:37:13:cb:ad:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.66.80.0/24
                IPv6:
                  2001:678:7c8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39086

    Signature Algorithm: sha256WithRSAEncryption
         8e:97:e8:76:34:f9:a6:9b:ce:6c:d1:4b:e8:e6:f4:98:33:66:
         21:81:ac:38:1e:8d:15:76:c5:12:b6:fb:4d:0b:67:ba:74:f6:
         fe:9a:e1:f8:9a:14:46:b4:1a:d1:c0:d7:a7:90:b4:e0:56:d7:
         6f:6b:df:90:07:aa:33:85:7b:0e:bb:f9:a1:16:b3:b1:9c:e9:
         37:42:a5:f1:d5:c4:8e:6d:97:d6:dd:f4:c7:16:7f:77:62:17:
         a0:84:d6:1c:8b:cc:43:a9:a9:b0:ba:99:9c:ee:ca:45:ad:fb:
         6f:bc:50:3c:17:b3:5d:0d:f0:ab:04:1f:85:59:b9:dc:e4:d9:
         fa:94:f8:e6:f3:35:fe:11:07:ac:7f:e1:de:ac:dd:1c:e7:38:
         ec:61:da:e1:15:bd:94:59:e3:8d:06:b5:7f:77:15:46:78:a3:
         56:ac:a4:8c:10:65:b5:cc:5c:bb:1e:93:1a:7f:f6:15:30:40:
         f5:18:a7:8d:ba:1c:7d:39:69:28:f2:99:30:8c:d4:c0:e6:dc:
         08:6f:d0:6a:95:21:e7:77:a8:08:71:72:66:e6:e9:26:8b:4f:
         53:25:37:ac:f2:15:d1:ac:73:e6:bb:e6:8c:7f:a0:0b:9b:4e:
         74:09:39:75:05:32:0b:83:15:4b:bc:5a:a9:c8:c7:81:d8:7e:
         9d:93:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----