Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
File:                     80fO2aDtf5RLn078OFd7OObRxnM.cer (raw, json)
Hash identifier:          VVQ04fAu8fG0sug+CWtDI1mcYF6b6VjPr1iGJ2gUF1c=
Subject key identifier:   F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425218A1D23F3E520355D131C47266B30
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.159.244.0/24
                          IP: 2a13:780::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:8a:1d:23:f3:e5:20:35:5d:13:1c:47:26:6b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:51:87:08:45:93:f4:cc:b5:cb:84:6d:16:
                    4d:c0:7f:5e:cf:02:06:62:32:20:43:1e:af:0f:89:
                    6a:2c:a9:a7:82:a5:57:2e:33:a6:f0:96:b6:f1:d7:
                    e2:23:fc:9a:05:f1:64:d0:f2:93:27:b7:79:81:09:
                    fb:bd:76:8a:d7:b7:86:52:d9:97:a9:1c:45:3c:65:
                    78:67:ba:56:6f:5c:e9:34:a5:07:1f:5e:1f:88:77:
                    f1:15:48:de:75:48:db:d0:c5:e7:57:b1:c9:e8:97:
                    61:c9:75:82:a3:88:f6:dd:84:5a:f4:29:24:67:fb:
                    27:e9:de:4c:de:ac:56:cf:40:77:ae:03:24:27:a4:
                    77:39:1e:73:4d:66:b7:71:0a:ba:01:ce:0b:b8:84:
                    23:36:8b:6d:29:ba:a3:92:7c:5f:44:46:11:65:86:
                    fb:56:be:c8:53:89:2e:82:ec:de:ee:7c:d6:27:34:
                    06:9e:79:5f:c0:d9:d4:0a:f8:df:99:b5:8f:f0:1d:
                    e9:59:99:ba:91:ac:59:58:9a:c6:19:5a:bf:02:51:
                    25:3e:0f:28:47:ed:25:46:f0:12:e3:b2:e9:3b:a2:
                    df:99:4a:d0:33:17:3e:9c:44:8f:56:97:7b:7a:0a:
                    8b:c8:56:bc:dd:86:40:50:c5:37:22:93:2d:bd:fa:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.159.244.0/24
                IPv6:
                  2a13:780::/29

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:f7:56:7c:aa:bc:5b:63:d6:be:ac:65:b2:3f:66:2b:78:
         2e:b0:ed:32:fd:77:67:5c:50:6d:47:81:ea:97:24:d6:d3:6b:
         5e:bd:cf:58:06:3b:54:9f:03:cf:db:32:e0:99:b4:c0:e6:fc:
         8e:1f:f8:fa:56:7f:94:54:44:5e:7e:47:a9:6b:9d:a3:4c:b8:
         36:91:d9:57:b4:8f:7a:ce:98:bb:bd:a0:b2:2e:ab:70:dc:ed:
         36:c7:c9:22:8f:27:e4:90:07:a0:cd:4c:5e:84:f3:66:5c:2f:
         02:19:22:3b:49:d2:9e:0f:fd:45:b7:21:17:a7:4c:02:4b:73:
         1f:69:94:b2:fc:5f:52:cf:83:92:b8:53:58:d9:8a:d0:a7:24:
         46:32:eb:6c:20:ea:6b:c6:e5:e3:c0:62:93:98:bd:c3:9a:b0:
         25:1c:de:34:91:9a:66:ba:a5:5d:89:dd:6f:02:d9:f2:6a:8b:
         38:57:93:d3:68:42:d0:6d:35:77:0a:55:dd:4c:3f:fe:e9:c1:
         84:2f:3e:1f:f8:ce:8a:b8:83:00:d6:32:a1:cc:bb:3d:3d:e2:
         97:b2:e3:9e:30:25:ed:14:72:4a:ef:8d:75:59:db:2b:11:a7:
         64:54:23:dd:47:d5:da:02:6f:78:f9:61:1d:61:d9:c4:8f:87:
         6d:c8:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----