Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
File:                     2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer (raw, json)
Hash identifier:          AE3F4vHReMushxV7m3vc1Sn8Ylk2ow6O0+IwhafQb3k=
Subject key identifier:   D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143DE77BCD7B63EE534D9EF919E7762
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.224.3.0/24
                          IP: 2a01:f4c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:de:77:bc:d7:b6:3e:e5:34:d9:ef:91:9e:77:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:78:a3:c3:8a:e8:a2:59:3b:27:93:36:ff:
                    e0:91:c4:9f:96:09:43:e2:73:be:7d:3b:18:89:90:
                    dd:f3:c2:17:f6:16:7d:7b:3c:3f:e3:03:ee:c4:25:
                    1a:cf:de:b1:67:91:96:d4:89:03:a5:8e:15:f0:b8:
                    36:2e:ea:20:89:f1:aa:9b:b0:43:d1:4c:3f:a7:02:
                    c5:64:0b:7d:a4:32:13:24:1f:26:ba:02:b9:57:2f:
                    cb:bd:e2:9c:b6:d7:07:34:2f:e7:55:9a:da:ee:3f:
                    1c:7b:a6:c6:07:2c:a9:b8:df:28:79:78:a0:1a:c1:
                    3f:91:c6:36:55:c8:91:d0:77:b9:40:54:ba:50:17:
                    03:27:e8:7e:33:eb:49:52:4a:f8:18:8f:6e:20:e7:
                    a5:3e:15:dd:99:61:4a:db:63:a0:84:e1:23:9d:c5:
                    e8:3e:fc:17:2a:11:c7:18:94:15:d3:43:f8:4f:c5:
                    4b:16:41:74:eb:bd:8f:73:3b:bd:4f:23:a4:67:ab:
                    4d:e1:85:de:ea:3c:14:7c:00:58:ae:f5:94:60:e2:
                    54:28:05:d9:65:fc:01:88:38:9e:0f:84:c1:cd:0f:
                    fe:17:33:ef:84:51:99:64:65:08:81:6e:11:7f:b5:
                    11:a7:ed:00:74:c8:6d:77:a1:af:28:7f:db:e2:1a:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.3.0/24
                IPv6:
                  2a01:f4c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:d4:1c:02:54:f4:48:21:70:ac:49:43:40:67:e9:32:ba:e6:
         d7:6b:be:77:1c:64:6b:36:c2:32:db:c3:ef:91:33:c6:cb:fb:
         61:c0:1c:7a:36:45:22:9b:86:ff:3c:7a:1a:99:37:d3:6c:83:
         fe:3c:9d:99:81:46:7e:c4:38:a2:e8:1a:4a:76:d2:99:17:47:
         5e:59:1e:39:ea:47:29:e9:3d:c8:b0:25:ad:fc:32:ee:2c:d3:
         71:6c:8c:2a:1e:07:0b:dd:a5:51:70:00:17:95:b1:17:34:59:
         48:25:b7:2c:04:f2:6a:50:80:97:f6:68:f1:ce:14:00:10:15:
         bd:5a:a3:1c:99:ee:e8:1e:62:ec:43:1a:0c:6b:99:fb:ac:29:
         1d:0a:14:52:cd:19:08:dc:05:f8:8e:03:9d:e1:35:16:5c:43:
         ac:32:16:b3:35:81:77:fb:f4:dc:f0:40:04:75:5d:ca:5a:95:
         12:6d:5c:51:ed:6c:95:13:72:6b:6d:e1:6b:d4:98:e5:ed:41:
         36:f6:51:c4:d7:04:0a:09:23:1d:fe:16:9f:60:b1:a9:41:ee:
         0d:ee:0c:7a:19:89:03:28:57:46:30:7b:4a:af:43:83:03:2a:
         4a:26:b7:cd:e2:d2:08:20:84:fd:0c:13:5c:df:01:78:c0:89:
         92:60:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----