Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
File:                     8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer (raw, json)
Hash identifier:          hs66xA3YzLgOUABxLwpIRc+C+FeRF3ssk5Eb9maSdTM=
Subject key identifier:   F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194F4EE833CC35C8F5C5A3EC359691EB81E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 11 Feb 2025 12:14:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215657
                          IP: 195.184.230.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:f4:ee:83:3c:c3:5c:8f:5c:5a:3e:c3:59:69:1e:b8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 11 12:14:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:a2:72:71:3b:28:31:bc:e3:01:a0:03:8a:
                    eb:dd:c6:99:47:a0:81:b9:84:f2:3d:f4:7d:28:0b:
                    7d:52:4e:71:3c:b1:df:36:77:84:21:cf:34:ed:f6:
                    ab:0a:8d:99:10:08:da:a5:1a:f1:56:65:8a:60:9e:
                    91:f2:7e:ea:93:95:32:72:59:f8:f0:55:dd:6d:04:
                    fe:76:78:a6:21:8f:96:5f:56:99:2d:b7:3f:87:c2:
                    16:c6:26:d0:f0:51:c9:53:0f:e6:05:54:41:3b:58:
                    3c:4d:84:cb:9d:16:fe:11:0a:3b:0d:17:b4:9b:3c:
                    25:bc:35:f6:b9:c5:8d:cc:87:64:88:c5:81:4b:87:
                    cf:ed:f8:0a:e0:fc:1f:ba:6e:3b:6d:ad:1c:6f:d1:
                    14:98:c7:d0:7f:76:1a:a0:31:4e:fb:b2:2c:0a:31:
                    b1:35:55:42:35:5e:13:d5:2d:ff:64:fb:7c:6b:a6:
                    00:82:9b:d4:97:f4:64:4b:03:2d:f2:52:d4:9e:ef:
                    17:61:bd:75:d4:ee:9e:bc:fd:58:e9:1d:09:52:a2:
                    97:1b:92:8a:b9:8b:81:ca:aa:03:ba:ef:3f:4c:1f:
                    41:c4:72:2d:b6:d8:0b:18:b4:86:e2:1f:31:91:54:
                    5f:5e:81:8a:61:d9:51:06:4f:e6:cb:f3:5d:86:45:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.184.230.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215657

    Signature Algorithm: sha256WithRSAEncryption
         80:de:a1:d4:80:8d:ae:44:12:ff:09:69:82:f0:07:91:0c:fd:
         70:d2:ef:66:8a:db:28:ca:e6:5e:61:a9:b0:f6:53:73:75:1e:
         01:1f:88:19:7e:35:97:aa:e4:b2:2a:30:0d:21:49:0e:61:e0:
         d1:bd:6c:58:21:44:b4:73:7d:f4:1a:3a:27:25:67:3a:ad:ca:
         61:c0:56:3f:bc:07:26:6f:8a:e4:04:21:63:68:27:99:06:ad:
         67:c4:f8:7a:e1:0e:cb:00:fc:c1:61:3b:43:61:e3:f1:27:18:
         ef:55:57:44:57:32:87:fc:36:f4:ff:b0:5e:93:3c:dd:3e:df:
         a9:c1:90:7f:ce:97:45:35:b0:53:60:1e:af:b0:f0:97:9a:6f:
         83:ff:be:e0:c7:be:3e:9c:be:c1:2f:10:40:d6:a8:e1:77:ce:
         1a:7f:f1:52:7e:36:c8:64:3c:8d:60:20:c9:55:ba:92:6b:f3:
         9e:5d:88:03:49:c5:50:3b:d2:f8:55:e4:16:03:0a:10:23:0b:
         df:dc:c8:b5:6b:48:21:71:e2:ea:a2:85:4b:bc:65:6f:c0:d4:
         11:36:ea:bc:a9:92:5d:18:a7:71:93:af:4a:91:c7:31:45:08:
         6e:a5:fe:e9:43:ef:2e:73:3d:24:65:68:63:c4:25:5c:94:a0:
         09:85:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----