Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
File:                     7a4BhsaCMBS8LELQTqZQv1zLmXY.cer (raw, json)
Hash identifier:          f5YYIbjT8/gixB8ETdDiALh3p7JO+urWTAZ1OvsJwRM=
Subject key identifier:   ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428251F108D4BDA122F1F0256911035A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:51:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200319
                          IP: 194.48.224.0/22
                          IP: 2a0c:f440::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:1f:10:8d:4b:da:12:2f:1f:02:56:91:10:35:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:51:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:84:45:bb:25:19:08:14:cb:c8:25:7b:15:
                    48:3a:cd:65:cb:9e:44:7e:a1:e2:a0:fe:e4:4d:9f:
                    a6:e5:a4:94:b7:2a:4a:da:50:f4:a7:ca:ea:73:4d:
                    22:3d:05:b0:91:97:ff:c6:86:b1:89:38:a7:cc:b5:
                    50:16:66:c4:b1:ef:57:23:b3:ac:0b:a0:4a:0b:f6:
                    a5:94:66:70:b0:c8:1a:e7:1d:d6:1f:fe:fc:7b:0c:
                    37:cb:58:aa:de:af:af:47:e6:76:21:cc:8c:ba:d8:
                    34:97:80:2f:35:0c:7b:53:02:88:22:87:de:e9:1e:
                    09:a2:a7:46:e9:61:63:c5:2d:46:a9:aa:1a:c2:0d:
                    8f:a6:cf:d8:c0:ff:47:0c:9a:06:ef:ed:51:a3:c9:
                    0b:72:ab:4e:23:b2:01:5c:82:bc:b6:18:85:b9:bb:
                    cd:9c:b8:e0:26:92:14:7a:f9:c3:6f:87:fc:f3:6a:
                    8f:ef:e3:c8:bb:6a:8f:71:23:20:42:3e:e0:c5:fd:
                    f4:7b:ef:ea:8f:d2:6c:a1:24:6b:2e:ed:57:08:e9:
                    a6:4e:37:5e:1d:19:71:e7:2e:43:ec:0e:1a:08:47:
                    01:c6:0d:1c:d5:2c:c0:e4:55:dd:51:71:e2:88:d4:
                    76:76:f8:c0:26:1e:70:b7:e5:cb:6c:c5:ad:8f:1b:
                    dd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.224.0/22
                IPv6:
                  2a0c:f440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200319

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:0a:47:57:4c:aa:38:13:c0:77:81:67:29:af:c3:0a:47:
         cc:dc:6e:85:55:6f:4b:e9:23:53:47:b2:db:4e:9e:03:4c:d8:
         8c:de:01:57:1c:ba:ee:12:64:c2:73:82:cd:7c:bb:95:ae:60:
         12:10:73:8c:01:b9:73:ac:28:0a:04:78:53:fd:f3:0c:50:e9:
         31:59:29:09:8a:46:e8:b3:48:47:97:b8:d7:11:a2:de:95:4f:
         dc:ce:3e:b8:92:82:6d:f8:ad:50:09:6b:81:09:11:72:6c:35:
         23:fe:21:d4:25:bf:76:b3:ab:00:35:88:47:09:5e:08:87:46:
         c4:08:c0:f0:98:94:86:3a:bf:e7:c0:a3:a7:0e:9f:e9:f7:d8:
         3e:4d:82:a3:ea:b6:62:da:7c:c5:0c:2e:b6:51:55:20:f8:77:
         15:c3:07:51:f6:4c:67:53:5c:b8:6d:2f:ad:12:9a:1c:57:93:
         f2:88:76:f9:d3:23:b4:90:cd:06:e5:de:28:b6:06:2b:b5:0e:
         7c:04:9c:15:9e:d8:72:ef:4f:70:b9:46:ef:17:bc:57:2f:8e:
         e6:cd:02:1c:e6:3f:08:b3:c1:7c:2a:53:c8:78:4a:b3:13:df:
         04:46:22:90:13:7f:fd:3a:6d:17:f3:d3:1e:6b:e2:6f:26:92:
         bf:5b:95:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----