Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
File:                     7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer (raw, json)
Hash identifier:          U/C/x48lhsMj+cTzyTZicGyTUTqfskcRe6xMtqa5rvU=
Subject key identifier:   EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C9E0075DF497B386ED85B0524CED7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197255
                          IP: 91.217.60.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:9e:00:75:df:49:7b:38:6e:d8:5b:05:24:ce:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:55:8d:b0:1a:38:6c:b1:b5:53:8c:ea:ab:
                    2a:cd:a7:eb:c8:21:b4:53:aa:e2:1b:49:79:0f:21:
                    69:9d:53:c2:32:76:36:55:66:d3:e2:b1:07:65:ef:
                    22:5f:28:cc:2d:5f:0f:7c:3c:4c:43:9a:cb:c6:4e:
                    1f:2e:a8:bd:f5:bb:84:d0:5d:31:33:0a:3a:0a:e2:
                    7a:14:fd:db:aa:65:c1:a2:49:8d:8b:dc:4c:d7:f0:
                    0d:58:c1:d2:b0:6d:d3:69:0e:8d:0a:20:0e:b5:e1:
                    7f:3e:96:c9:cc:91:fa:eb:70:c1:ca:ff:b5:60:39:
                    56:a4:2e:3b:0e:13:38:a1:b5:8c:53:39:6c:41:53:
                    04:8f:c9:ca:f3:00:b4:bb:2b:08:ba:f9:e0:7a:8e:
                    48:7e:66:c5:ba:ea:3e:98:38:aa:6c:8c:99:92:ae:
                    c7:47:67:f5:3c:72:ca:66:76:7b:9c:dd:ae:79:c2:
                    ab:47:86:e7:b5:75:87:91:26:d6:fa:35:52:90:fd:
                    a9:0c:c6:4c:33:f7:6d:b1:74:a2:33:f9:b6:df:5a:
                    5d:b9:79:6a:47:58:0d:cf:20:7d:5a:45:bf:13:d5:
                    1e:08:26:e8:67:68:65:79:f3:f4:f1:af:a6:9b:c7:
                    89:5a:82:d1:56:ab:24:1b:0b:8a:87:79:fb:f4:10:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.60.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197255

    Signature Algorithm: sha256WithRSAEncryption
         14:d5:3d:bb:5a:01:ff:04:84:c3:a2:a9:1c:83:a1:8a:3d:a5:
         63:ee:7a:58:65:42:0c:2a:f2:9e:81:a8:e5:ea:2d:7c:66:86:
         d5:d2:db:f7:5d:ba:8f:56:04:71:82:11:2f:6d:1e:38:2c:f5:
         88:f4:d3:2a:a6:b9:af:a7:73:c2:2a:9a:bf:2e:e2:f5:06:f4:
         1a:be:0e:92:55:fb:d6:90:1d:aa:4c:06:39:67:25:93:c1:7e:
         02:7c:a8:5e:13:02:e9:2d:b6:d0:2a:e7:6c:d7:94:33:2b:c8:
         46:0c:22:5c:3d:5b:ad:84:88:1a:2d:f7:5b:e7:8d:3a:9b:ac:
         c7:9b:1a:56:2f:4a:5e:ab:de:15:90:41:28:e0:7b:2c:02:fa:
         00:d2:9b:7b:4c:74:9d:9c:c6:50:9b:6c:cf:a8:50:0e:d4:4c:
         ce:ac:a0:39:41:a1:e9:65:4b:9f:4f:1c:43:61:71:2f:69:a4:
         6f:a8:10:4f:ff:dc:db:7f:9c:25:71:e1:fc:e3:92:44:e2:6e:
         85:18:20:3a:cd:6d:16:3f:e9:14:dc:28:ea:92:76:59:91:03:
         8e:a8:df:86:dd:8f:f6:1d:44:5e:0a:b0:fb:52:05:35:89:6e:
         12:4b:33:32:02:11:43:ae:a1:55:59:3b:a2:35:2b:cc:8c:01:
         9f:50:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----