Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer
File:                     6t-ABI0gMuwiQ2Snc_6B0j-pFOA.cer (raw, json)
Hash identifier:          1MBXGyfg66qFdvJDL64Pqn/EWlqvgmp4Erp5lKJuKzg=
Subject key identifier:   EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAA661E5C79B90056F5657654B413C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209825
                          IP: 85.209.44.0/22
                          IP: 2a09:92c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:a6:61:e5:c7:9b:90:05:6f:56:57:65:4b:41:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eadf80048d2032ec224364a773fe81d23fa914e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:2a:d3:1a:e9:ea:df:e4:8e:b9:36:c8:7f:
                    95:a8:6e:0a:bc:4c:35:e0:54:42:54:b5:28:c6:fc:
                    0d:b8:b7:70:5a:4c:01:97:32:e0:a3:8f:26:f3:28:
                    11:ba:71:eb:82:b2:58:ac:9e:91:7f:01:f6:5c:b3:
                    7b:09:ee:b2:59:7a:d3:56:40:d6:6c:19:fd:9a:f0:
                    f9:75:be:11:53:8a:6e:8f:18:26:23:c6:8a:30:86:
                    f0:a5:9c:8e:8d:43:b4:c4:6b:5f:9f:ea:7e:b0:52:
                    0c:b2:5f:07:bb:9d:19:ee:57:f8:df:dd:73:81:05:
                    b2:32:7d:45:92:07:71:11:97:04:79:3c:66:da:84:
                    89:fa:b9:ba:e7:e7:eb:3b:a4:df:b9:c8:60:49:6b:
                    67:4f:98:03:83:03:a1:4c:79:5c:c6:3c:2b:bb:6b:
                    01:be:48:99:ad:44:b0:d0:01:14:de:df:05:1d:9e:
                    d4:f1:64:08:be:b7:f7:b0:8b:df:c0:f4:0d:22:57:
                    2d:09:96:a4:a3:05:ce:b3:4d:e7:e3:9b:4d:1b:43:
                    8f:ec:53:c8:45:65:6f:b0:15:3d:b4:23:a7:9f:f9:
                    2d:13:0e:68:5a:93:2f:06:23:41:e1:fc:19:c4:a7:
                    e8:78:32:78:9a:d3:f2:70:59:2a:0f:63:ba:fb:b4:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DF:80:04:8D:20:32:EC:22:43:64:A7:73:FE:81:D2:3F:A9:14:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5da8c2-cfd5-4853-9831-fbb1348a8620/1/6t-ABI0gMuwiQ2Snc_6B0j-pFOA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.44.0/22
                IPv6:
                  2a09:92c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209825

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:8e:ae:c0:ed:6a:d3:b5:91:5d:8a:af:08:60:4b:a3:1b:
         7a:7b:dd:a2:11:95:1e:d0:ac:5a:0d:20:d3:fc:af:e7:99:f3:
         e2:ed:c5:6a:37:d3:18:8a:2a:53:da:d7:69:dc:4c:ac:c5:89:
         33:84:50:31:5f:c9:54:20:94:8b:43:1e:33:b5:87:3f:30:4b:
         fb:e5:22:6b:58:0d:41:cc:a4:1d:df:21:1e:da:2e:db:9e:ef:
         a5:1e:05:2d:f4:11:e1:71:17:29:87:45:87:8f:f9:44:9e:68:
         19:bc:c1:85:e9:09:c3:a6:a3:ec:e4:de:a2:cd:f3:f9:36:1b:
         c7:35:c4:a3:84:f9:06:ba:16:f1:a2:3e:bd:58:92:bf:20:3b:
         50:17:79:7d:dc:0a:87:72:bd:f6:53:13:99:52:9a:68:91:24:
         21:17:29:58:0a:2b:bb:d9:49:85:2e:16:97:72:83:a2:ca:59:
         f8:8e:5f:50:38:7d:26:4f:45:85:45:31:2c:ad:50:96:49:53:
         18:0e:ff:ee:51:45:40:f7:0d:31:eb:12:bf:33:9b:c6:b2:ed:
         a3:46:38:7b:93:1c:bb:17:c2:5d:69:54:72:5d:2e:58:71:3f:
         4f:0c:6e:70:81:76:ef:2c:c9:28:5a:5a:32:8b:04:63:66:10:
         03:4f:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----