Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
File:                     4AEry55udHI3ckeBpMkZ_FyUGWU.cer (raw, json)
Hash identifier:          jxZqB6GQ6PkLsedBuoVDYaqZqDB/YbrjlJd4m5OSqOI=
Subject key identifier:   E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA9F97BD17B0D1DF119C394861E7AD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57645
                          AS: 60065
                          IP: 91.234.16.0/24
                          IP: 2001:67c:13d0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:9f:97:bd:17:b0:d1:df:11:9c:39:48:61:e7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e0012bcb9e6e747237724781a4c919fc5c941965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:32:84:4b:bd:9c:d5:9a:49:83:cd:e2:e6:82:
                    76:aa:55:24:26:5c:f5:f5:da:d5:f0:67:6c:54:d2:
                    99:5b:95:6e:bf:01:8a:61:56:54:b3:be:df:34:d0:
                    62:c3:58:bf:7c:38:c5:75:4b:3c:b3:24:18:20:9d:
                    4b:b4:ab:e8:b6:3a:4e:1a:d0:6b:e0:59:bb:55:08:
                    62:81:81:59:2e:71:67:4c:82:da:f5:83:6e:a5:ee:
                    a0:d2:23:7e:a1:bf:9e:37:ba:13:d6:7c:ff:2b:f6:
                    bf:c2:d4:07:8b:ac:58:3b:49:94:44:22:f9:a9:f4:
                    b9:97:ba:f1:2d:95:e1:49:43:e0:fd:ce:f7:83:39:
                    cb:6d:47:94:4b:08:5b:53:33:a4:63:37:7b:b2:e9:
                    07:99:7a:2d:ec:d7:28:99:7c:88:50:01:9c:29:2d:
                    56:b4:7c:26:64:3f:29:9e:17:f4:d7:a3:1e:55:e5:
                    53:00:d2:89:3a:7c:a8:e8:51:52:7d:a0:91:90:4c:
                    45:f3:e8:15:8c:20:b2:01:05:57:f0:d3:8a:6b:92:
                    fd:21:55:81:32:35:89:3b:34:8a:f3:10:c1:fa:47:
                    36:eb:72:24:8e:7a:f5:89:93:ff:bb:55:94:87:98:
                    bd:2d:12:56:b0:ac:28:44:16:55:50:4a:9f:0b:78:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.16.0/24
                IPv6:
                  2001:67c:13d0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57645
                  60065

    Signature Algorithm: sha256WithRSAEncryption
         95:73:0a:b4:65:af:59:ef:db:17:78:4d:fa:1c:15:8c:87:95:
         7e:ae:24:f1:26:5c:20:52:97:08:50:87:7b:cf:6d:ad:0b:09:
         4d:e3:2d:ab:d8:04:34:9a:d1:0f:ca:60:23:27:57:ab:20:57:
         e2:19:5d:6b:26:e3:7d:b9:2d:fa:28:a3:5d:9c:39:ba:8b:2a:
         ab:81:f7:3b:87:0d:23:a5:f9:e0:d6:55:39:59:63:e9:cb:56:
         7a:a2:5c:e7:00:d2:5e:40:64:72:a9:88:20:75:3e:2d:d7:97:
         a1:0b:23:df:f1:fc:d5:45:76:5f:6d:7f:55:e2:1a:a3:26:62:
         46:25:37:85:55:57:ae:d9:54:df:5c:84:6f:e9:6b:5d:23:2d:
         94:56:c6:d5:69:7f:a5:df:1a:98:1d:49:aa:ba:60:6d:66:ce:
         96:3f:fa:ea:84:90:28:ff:e2:53:f3:97:aa:cf:22:26:f1:e4:
         d5:43:62:4e:70:04:c5:89:11:ba:44:d4:c2:51:7f:fc:13:4b:
         21:7d:ca:a0:fd:ce:7e:2b:d8:df:08:05:b8:d6:da:ca:65:9a:
         53:51:0f:14:09:a4:e7:40:8d:9b:cb:d2:c5:69:0c:d9:a0:f9:
         2e:c3:d3:08:ba:04:08:6a:f8:da:13:07:4b:3d:e7:93:ab:93:
         72:b0:12:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----