Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
File:                     2AtJfVG9n0e4T2k9aH--jPbP-3U.cer (raw, json)
Hash identifier:          zTE91Si2YdUo7BpZSnl1ymF/lm77QeS+rQNIcFa2Eb8=
Subject key identifier:   D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194740B1FED863163A82727193750E6DF97
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 17 Jan 2025 11:34:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216325
                          IP: 185.94.183.0/24
                          IP: 2a13:d940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:74:0b:1f:ed:86:31:63:a8:27:27:19:37:50:e6:df:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 17 11:34:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:e7:7f:09:0d:fa:3a:06:48:61:ad:1e:15:
                    49:2d:0c:ba:c3:ea:55:31:e1:36:17:f5:34:20:10:
                    99:c0:f1:71:4f:f9:a9:05:cc:8f:2a:37:72:2c:f4:
                    ba:b8:fa:ba:72:ac:06:2a:98:4b:0f:cb:d2:19:bb:
                    36:0c:65:5c:f5:72:53:6c:6d:5b:43:bd:8c:a4:a0:
                    a5:ec:83:bf:16:ef:52:ca:3d:46:dd:85:93:2a:43:
                    34:00:80:a9:4f:96:f9:43:2f:4d:ce:1b:a7:14:7c:
                    b3:63:ae:0a:1c:71:4c:83:53:63:9c:65:36:06:f0:
                    a5:b5:2b:44:96:34:38:06:23:5e:11:ad:c8:84:d2:
                    8f:e9:17:a9:5f:43:51:80:5b:aa:34:4b:cc:60:58:
                    23:2e:f1:0c:15:d6:79:38:5b:46:e8:c2:58:5a:b1:
                    f6:29:ec:e1:18:2f:4a:46:d5:c1:39:89:54:91:ee:
                    83:30:f9:98:a0:01:8c:50:c7:38:53:5e:16:91:9e:
                    f1:e2:3a:20:fd:a3:50:19:e8:00:ec:93:b2:54:88:
                    f4:e6:fe:40:62:3c:1f:05:b1:f5:1f:4e:5c:dd:ef:
                    6e:28:d0:c3:d7:43:b9:a0:25:09:76:80:c1:1a:a8:
                    e4:3e:fb:1f:73:3a:da:72:ce:bd:8c:f4:5f:52:33:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.183.0/24
                IPv6:
                  2a13:d940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216325

    Signature Algorithm: sha256WithRSAEncryption
         7d:71:90:c4:46:77:09:14:80:f9:49:23:5f:35:c4:bf:2a:7a:
         0c:45:c6:1e:e3:27:0b:7c:b6:17:32:f4:c8:17:46:b8:43:84:
         86:27:de:cc:0b:a0:5d:35:6b:93:8e:ef:6c:51:19:31:0a:c6:
         0e:a4:9c:63:f7:9d:42:85:f7:f3:dd:be:f1:32:91:c0:79:e9:
         29:1a:98:47:de:92:f2:5f:68:ec:c0:d2:9f:36:15:39:e4:f2:
         68:48:a6:ea:70:fc:37:d6:92:0c:7a:a0:09:aa:db:c0:2e:43:
         44:1e:7b:ef:97:f5:83:2b:c4:f8:18:59:d7:95:42:b2:69:3b:
         28:47:09:98:a0:12:0f:00:89:57:52:9f:be:32:8f:a5:4a:a0:
         e6:e3:a4:19:c1:8f:4f:48:33:21:aa:02:5e:77:c9:3f:cf:69:
         98:63:01:9d:51:d7:8e:c0:4c:00:7d:b9:00:fe:ee:e8:06:53:
         1f:93:4c:74:62:f2:6d:99:7a:05:27:d8:4c:f7:af:67:99:9b:
         8e:77:b8:78:74:6a:5e:a4:03:d8:86:78:2e:11:11:21:48:b3:
         55:a9:90:5f:39:7d:d8:e5:a8:3a:99:d6:1a:6b:9a:fd:a5:92:
         1c:31:50:4d:c6:12:97:e5:7c:fa:58:85:f2:86:ad:36:13:85:
         23:56:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----