Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
File:                     40Y8J4uE4t8ApHvC2AyNgP-puok.cer (raw, json)
Hash identifier:          IDLP4Yx6YhU36n/QtaKeZn8UUtGRDxeHZo6y9x4MgEc=
Subject key identifier:   E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5D4762AACAD1F34236FE88EEF1CC7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197690
                          IP: 185.35.172.0/22
                          IP: 193.104.37.0/24
                          IP: 2a00:b060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:d4:76:2a:ac:ad:1f:34:23:6f:e8:8e:ef:1c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:74:50:5b:52:25:b4:31:53:ac:db:9f:86:
                    b3:89:71:92:4f:9d:86:03:8e:73:83:ce:cb:31:6b:
                    26:87:98:53:f8:fa:eb:c8:6a:77:0c:e2:04:2e:c4:
                    76:b0:88:a6:40:24:81:ee:12:04:35:c5:ed:99:1d:
                    9a:d3:0f:ac:93:01:ac:87:2c:6a:cf:2c:cd:29:d1:
                    80:e1:72:b1:a8:7f:99:58:af:2e:31:c7:1f:67:36:
                    7d:34:67:ae:c9:f0:90:9c:5a:1c:5f:61:32:c0:1c:
                    a2:0a:8e:e2:42:21:2c:23:9b:2e:0e:53:2f:33:74:
                    dc:2c:1b:49:ee:c9:ac:45:e6:0f:c2:9f:9c:dc:a9:
                    f5:fa:a1:af:7f:3b:b6:1f:fb:f5:d5:7f:38:73:e7:
                    43:86:a3:80:cc:cf:c0:1d:ec:da:c1:28:1f:09:3b:
                    67:b8:32:c7:69:8a:ed:53:c3:09:83:f6:78:e0:f1:
                    bb:c1:5a:e4:c6:26:2d:e8:42:b4:ed:62:a8:3c:23:
                    13:12:1d:7b:ff:30:ef:02:ed:bb:3f:2c:5a:51:55:
                    64:6f:a0:d1:a5:2a:d1:ce:ac:71:f8:fe:49:47:4e:
                    44:1a:ed:eb:d9:f6:15:06:b4:93:b4:da:7e:4d:e8:
                    be:49:d7:45:67:8e:96:80:cb:3b:e7:0b:71:a5:47:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.35.172.0/22
                  193.104.37.0/24
                IPv6:
                  2a00:b060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197690

    Signature Algorithm: sha256WithRSAEncryption
         34:61:ea:f0:c1:fe:fe:1f:29:1f:06:bc:31:62:ab:2e:c2:93:
         12:b0:54:6e:1f:5e:38:41:bf:cb:be:17:b2:27:e0:8b:2c:b9:
         d0:1a:62:ce:04:a9:50:46:14:74:e0:08:24:63:cd:3d:af:25:
         7e:f8:c6:c8:e1:58:ae:4d:90:7c:a3:5f:b7:de:1d:98:e0:5d:
         e9:24:fe:c3:cf:0c:30:40:e8:57:ba:0a:b2:b8:00:9e:a0:84:
         8d:97:24:b0:d2:8f:aa:1c:dd:c4:be:b8:93:eb:49:9a:e9:1c:
         5c:d6:7e:53:16:0f:d2:c4:45:6e:62:07:fc:0e:fe:5d:be:7c:
         04:72:23:6f:a8:e2:39:0a:71:d5:6e:2b:8d:e2:9f:d2:cd:60:
         34:73:32:42:71:10:fb:53:36:6f:47:9a:cb:82:28:e7:05:c9:
         d4:a4:d9:23:7c:0a:f6:60:d4:80:a5:f5:1b:e5:74:1b:0d:84:
         99:8a:c8:6a:28:bf:0b:08:f3:30:d7:74:6f:d3:2c:7f:6b:62:
         33:39:dc:c2:29:34:d1:34:fc:57:a4:01:b4:28:b5:75:2c:cf:
         fc:17:13:bc:69:1c:ad:9d:5e:e0:91:d4:84:a6:bf:3b:d3:c5:
         e0:c0:f6:77:38:26:c2:fd:dd:05:75:6e:48:2b:5b:7e:fa:be:
         62:1d:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----