Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
File:                     8DpbV31dnm0cX9O-1ADpacC-fDQ.cer (raw, json)
Hash identifier:          FKzbSE2zEZitIhjzTysmIPDSIx+rlKJdRNEJDMnHafo=
Subject key identifier:   F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067B747F5F5BF30682C34CB5E0695F0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49896
                          IP: 185.33.48.0/22
                          IP: 193.104.23.0/24
                          IP: 2a04:59c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:b7:47:f5:f5:bf:30:68:2c:34:cb:5e:06:95:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:dc:ee:c9:59:60:6f:33:2e:67:4a:e5:a2:
                    96:86:34:40:c2:e2:d7:79:46:79:79:c3:57:7e:64:
                    f9:6f:b2:36:42:6d:07:1b:71:64:2d:1e:7b:1f:2f:
                    cf:47:04:44:d9:c1:ed:4f:f2:75:af:d6:e2:bd:63:
                    26:8e:1f:29:26:44:d3:6e:69:69:aa:95:b9:00:4a:
                    67:05:92:83:f1:a1:3c:b6:51:e1:57:1e:35:58:ef:
                    2d:ac:39:24:e8:2c:23:b7:9a:ae:83:15:eb:41:dc:
                    8e:e0:78:45:f0:82:8f:ca:9a:84:92:7c:30:a6:62:
                    a1:c4:7b:4c:37:6d:17:11:60:b1:72:99:8b:61:a1:
                    63:99:00:3d:2b:42:09:5b:5a:ae:95:89:4e:f4:55:
                    a0:58:a9:bc:36:5d:6c:2f:00:81:a0:50:6e:16:6a:
                    bf:5d:23:48:bf:42:24:ba:38:f6:1e:26:66:b4:ff:
                    07:55:84:d5:96:5f:d4:f4:cb:db:ac:30:67:9b:c8:
                    20:70:ea:54:8d:1e:5f:11:c7:ca:a5:40:e7:1f:d2:
                    f8:25:e3:dc:45:43:bb:2d:a4:d4:5a:cd:98:d9:4e:
                    2c:11:3e:0e:45:78:be:22:8e:9a:4c:70:08:e0:40:
                    3a:4d:06:53:d6:c4:d9:78:70:12:45:58:56:18:0e:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.48.0/22
                  193.104.23.0/24
                IPv6:
                  2a04:59c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49896

    Signature Algorithm: sha256WithRSAEncryption
         76:b5:0e:a4:c0:3a:30:68:7e:78:9a:68:e1:7e:4f:41:3c:73:
         08:a8:60:47:08:4e:e1:28:11:c6:04:b6:b5:5e:fc:75:cd:46:
         51:60:8f:bf:4c:43:06:1d:b1:44:e2:b0:d7:e8:19:fe:53:6b:
         bd:f3:51:4e:dc:a1:b8:06:e5:e9:d2:cb:33:51:6e:bf:90:2a:
         d7:4b:ec:ae:de:1c:f2:33:f8:c3:44:f6:76:8e:b3:3b:24:ad:
         e8:ec:67:39:85:a4:42:6d:8d:c1:4f:49:cb:d3:cc:8a:09:be:
         c8:03:db:b2:23:fe:31:41:af:4b:df:0d:58:46:5e:b6:0e:78:
         34:f8:0e:16:88:bc:a2:c6:66:5c:c1:ab:3b:f3:60:98:05:61:
         ca:d6:22:6b:04:fe:9a:58:74:5f:5f:2d:0e:bd:c9:94:03:35:
         d0:3a:28:3b:a2:4a:28:56:c5:f5:f4:4b:49:18:0e:eb:f9:e3:
         57:f5:be:c8:a4:a0:9d:6c:07:4a:61:04:5c:55:41:4d:29:e3:
         9f:57:07:a8:38:eb:ac:86:b7:3d:af:36:d7:07:67:08:d0:93:
         6b:3b:1e:9f:dd:af:92:a6:86:90:91:87:a4:52:85:53:03:32:
         1b:ff:a3:ee:fe:ad:85:67:c1:55:cd:f9:bb:c7:02:64:c0:54:
         2e:db:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----