Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
File:                     8J3iYg0i-mnFTL68by9IUFbOL-U.cer (raw, json)
Hash identifier:          xlvUGOccUG1Oa0Wm3YDCYfY8ks/z27ulYqIsnAfP238=
Subject key identifier:   F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274650DE2A883EB45CBBC0BE921CE22A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211822
                          IP: 91.216.139.0/24
                          IP: 94.139.62.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:46:50:de:2a:88:3e:b4:5c:bb:c0:be:92:1c:e2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:1c:45:36:5f:e8:e8:c6:1c:78:46:7e:00:
                    e2:7b:e4:b3:b6:11:97:c5:6e:04:fd:9e:fe:77:7d:
                    22:77:b8:fa:db:a1:16:4f:bc:60:0d:9a:9a:3e:ba:
                    88:e0:19:e7:2d:a2:ba:5f:ac:d1:36:f8:f8:d5:18:
                    d3:85:c0:af:69:55:0a:f7:3e:f1:62:4c:ad:26:f6:
                    77:4f:9f:e2:78:2d:9b:ac:9e:7e:2f:42:54:02:48:
                    c6:b3:9d:a7:d1:c4:6b:95:f5:a0:a5:7a:ec:3c:f3:
                    36:bc:a7:3f:82:89:ef:32:34:20:43:34:47:d4:83:
                    df:2b:93:d4:48:2f:c5:b0:7b:4f:6b:84:28:f6:42:
                    50:fb:c0:f6:3c:84:b2:cb:a6:eb:31:b3:bd:c3:fc:
                    dc:1e:43:37:0c:8e:da:14:96:a3:5f:57:c3:ef:21:
                    01:20:8b:82:4e:1d:44:f7:30:b2:f6:f9:1e:a5:95:
                    fe:36:28:bf:92:bc:68:33:65:37:67:5a:5d:78:a5:
                    c3:b4:7e:d2:30:04:d7:a6:df:c7:ac:e6:4f:42:d1:
                    42:6e:76:d3:e2:96:b7:09:39:56:82:42:bb:f9:e3:
                    ac:81:dc:22:96:4d:bf:2f:5b:c1:2a:05:4f:9d:6b:
                    fc:cf:27:54:76:7c:29:e4:cf:34:bb:44:7e:90:64:
                    9e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.139.0/24
                  94.139.62.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211822

    Signature Algorithm: sha256WithRSAEncryption
         a0:30:0a:e8:dd:47:26:59:e9:93:61:1f:89:66:e5:3b:29:41:
         1e:60:09:d5:47:e5:08:32:b5:62:04:a2:49:b1:81:dd:33:02:
         af:98:b1:4e:40:ab:e2:d2:07:9e:ed:33:a8:80:a9:a9:d2:27:
         67:85:3a:09:fc:8f:ce:ff:2c:df:c3:2f:70:72:54:e5:81:6f:
         bc:56:de:0a:08:14:1f:09:a2:f3:1d:15:9f:3e:00:54:72:f3:
         45:6e:80:af:c5:1f:58:22:e0:2b:aa:c6:d1:92:7a:3d:35:70:
         09:aa:fc:eb:c9:ac:f0:5b:ae:87:10:71:2a:44:f2:2a:67:10:
         a8:f9:19:e8:7a:6b:7e:43:5c:f0:79:6d:88:8b:2e:3e:34:e4:
         03:89:06:8a:4e:6d:84:a7:e4:76:9f:85:d5:a1:16:f2:24:bd:
         2e:ed:92:c9:82:d2:4f:7b:60:3b:6b:73:5d:30:3f:68:80:fa:
         95:5e:70:52:77:41:20:4e:ab:8e:97:1f:08:cc:ca:14:c4:8f:
         99:84:73:51:e0:33:16:4c:48:00:af:72:04:ef:bb:aa:ae:5b:
         d7:c9:ce:22:de:58:bc:7a:69:08:cc:14:d8:8d:cf:0d:23:d3:
         07:0d:73:ba:4e:83:31:3d:49:5b:54:6b:ad:1e:48:dd:1e:3c:
         ac:5e:26:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----