Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
File:                     5I2jNbByU21Y5rfN9M2xZEW8vDM.cer (raw, json)
Hash identifier:          3K44QHZlAHTQjnb9QiVV1y0RUuqVsMqkSs28xr/KRWw=
Subject key identifier:   E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1B1D8B6CCC3124DC9E473A4030BD9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197107
                          IP: 178.20.192.0/21
                          IP: 185.58.88.0/22
                          IP: 195.225.64.0/22
                          IP: 2a02:56e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:b1:d8:b6:cc:c3:12:4d:c9:e4:73:a4:03:0b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:75:f0:62:06:c9:5f:0a:35:01:2c:d5:01:
                    b8:55:d2:72:3e:4a:cc:d0:3e:c4:93:d6:16:91:b6:
                    55:66:30:08:e2:90:d7:94:bd:0c:0e:28:23:f6:8d:
                    0b:b5:8e:6e:bd:4a:b3:bb:2d:da:d8:01:1c:c7:95:
                    4c:09:9e:00:50:2d:85:7e:c3:48:5d:85:53:25:a6:
                    4f:b8:d3:ef:d2:ca:15:72:5a:46:59:d0:40:c8:5f:
                    1a:d6:de:b7:56:5b:f6:84:ca:4f:5b:d6:41:d1:ce:
                    18:7d:57:ba:84:d1:53:70:fe:ea:b2:34:81:2b:9c:
                    27:d3:df:a2:ae:49:f6:a6:9d:51:d2:6a:c3:a2:a3:
                    f9:d0:55:9c:36:6a:f0:e9:bb:46:fd:d0:68:5f:f7:
                    dd:5a:dc:06:bc:14:e3:bb:e9:3d:85:71:54:5f:6f:
                    ae:00:81:98:43:b9:d6:2b:fa:86:9f:b5:25:92:63:
                    1b:9f:14:b6:3a:ac:23:fb:5b:f5:c8:f8:f9:0b:93:
                    fd:ea:94:91:07:61:a9:9d:98:c8:21:1e:ca:03:99:
                    7d:24:9b:2f:8b:3a:eb:3c:bf:db:4a:27:74:e3:72:
                    01:09:d1:9b:93:ff:6e:cf:f8:88:e5:ec:68:73:14:
                    00:43:ad:1e:6e:3c:c4:9b:ac:54:a8:1f:5a:3d:1f:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.20.192.0/21
                  185.58.88.0/22
                  195.225.64.0/22
                IPv6:
                  2a02:56e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197107

    Signature Algorithm: sha256WithRSAEncryption
         71:9a:bb:50:c3:ae:22:f4:11:3f:22:9e:3d:ef:41:e3:f6:bf:
         17:fb:59:e4:1d:db:df:27:fc:d3:0f:c2:88:55:13:fe:e5:60:
         70:db:cd:67:1c:4e:01:d8:46:d6:fb:15:62:26:1d:46:e4:45:
         5a:e2:00:df:9e:e4:91:b6:27:e3:f7:f5:94:c5:ff:44:fc:31:
         6f:b1:00:ff:3d:8a:51:b0:0f:7f:54:0f:ca:eb:a0:4a:50:2c:
         05:b5:b4:1c:b2:04:cb:ad:f4:11:df:21:f8:4d:c8:de:05:59:
         e2:4f:b6:83:e3:aa:33:d7:ea:c8:de:9d:64:2b:c7:84:70:9d:
         70:d8:9f:84:33:96:88:c1:07:c8:4c:9a:bb:10:7f:ab:d2:a4:
         96:ca:e4:c1:36:e8:f7:5a:7a:64:f6:be:65:62:a5:48:d7:bd:
         41:ea:4b:18:01:75:bf:fb:e9:4d:26:06:6e:b6:f8:f3:c0:84:
         03:02:66:d3:2f:08:3a:3d:f8:59:1e:28:3a:67:12:23:0e:fe:
         9a:f9:97:43:02:7e:18:78:9e:9d:3b:1e:ee:08:66:ec:45:9d:
         fe:60:53:72:b0:7b:68:3d:03:a4:56:6c:94:d7:54:77:8a:bc:
         07:a8:2e:07:9f:44:1c:31:dc:cf:54:b8:fa:60:46:cd:6e:7b:
         d1:d0:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----