Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
File:                     3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer (raw, json)
Hash identifier:          adHExFg0FtiqzXXXj0fdOafKflSP3ST+WUyi/dPzyzY=
Subject key identifier:   DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B25BF28464575181051CDC87BD0AE8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205914
                          IP: 185.72.16.0/22
                          IP: 2a03:3da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:5b:f2:84:64:57:51:81:05:1c:dc:87:bd:0a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=de51da32762a6f9c126d63ba705d62c050b8484e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:ca:da:3a:88:f9:e9:00:da:ea:03:99:f3:
                    43:be:3b:77:4e:47:f6:b2:29:26:1a:ae:b1:0e:1a:
                    1c:28:cf:cc:9e:88:04:b3:c8:0d:c4:ae:a3:be:ba:
                    13:39:52:0b:14:94:c5:cd:d5:8a:89:48:10:d5:5f:
                    a2:c3:fb:bc:f3:29:30:42:77:64:9a:d3:3c:29:70:
                    99:7a:9e:60:67:6b:fd:c8:3e:98:aa:2a:18:d8:5f:
                    36:68:c5:b7:5f:98:cc:f6:d8:4c:6d:fa:9d:ab:d7:
                    bd:d9:ce:3a:8f:24:e9:7a:0a:ed:a0:7d:33:c2:19:
                    06:4f:80:c0:41:b5:b8:e5:ce:fc:1c:8e:51:ab:4c:
                    ae:50:16:8d:c6:92:5c:c4:99:89:7b:3a:42:91:f8:
                    b5:02:6d:01:e1:25:eb:d5:d2:44:4f:4a:63:aa:8e:
                    a0:6e:f1:98:de:91:36:e5:f0:e2:e2:0e:8f:43:db:
                    71:74:4e:55:94:9c:70:3d:08:e5:fd:ed:19:e5:38:
                    4f:ed:9a:39:20:49:3d:08:6a:60:d0:65:5d:cc:ee:
                    7a:34:1f:d9:be:b5:3a:6b:9a:cc:92:e9:fc:7b:b1:
                    6e:cd:55:5e:97:57:4b:0a:24:1b:a5:b3:b5:36:71:
                    39:2b:ae:3b:08:ab:a7:31:dc:82:ca:7e:fd:59:8c:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.72.16.0/22
                IPv6:
                  2a03:3da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205914

    Signature Algorithm: sha256WithRSAEncryption
         7a:64:05:c8:f5:de:8a:1e:5f:4b:8a:c4:ac:a3:f8:47:41:5d:
         ac:50:ce:19:4c:23:6f:8e:ae:c4:f6:c3:b4:31:64:fc:4e:78:
         06:56:8c:7b:f8:e8:b5:c4:67:91:8d:f7:07:cb:40:04:00:84:
         fb:0b:79:aa:47:ef:c5:d3:a3:2c:bf:11:43:2b:c3:88:15:c6:
         d8:d7:a2:87:63:74:4b:d9:1e:cf:e8:19:64:0a:52:90:72:9e:
         0c:53:a9:e5:3d:c7:e1:42:d3:f6:eb:7d:50:53:2c:b4:f6:ae:
         04:79:84:29:de:e8:e8:ad:a2:f4:92:4b:14:4b:47:01:d3:09:
         ac:d5:07:46:36:48:67:81:be:7f:32:a1:02:e2:15:26:7a:80:
         32:ba:54:c4:36:08:88:27:68:74:f0:a0:1a:e7:2a:7f:79:32:
         80:c0:3c:20:42:4d:ff:f3:aa:03:46:89:19:06:71:c4:ae:bf:
         b9:78:df:d0:6c:59:de:f5:47:4d:f5:19:83:2b:32:a6:3e:fa:
         a2:94:d2:82:f7:1f:0f:72:7e:f1:01:c7:3a:1d:3d:56:65:37:
         eb:ee:f5:a5:c1:89:b9:8e:b5:a8:07:d9:fd:7d:aa:ab:7d:21:
         68:ba:2d:ed:30:d8:aa:db:31:76:dd:0f:57:62:c5:f2:bc:76:
         02:d5:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----