Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
File:                     8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer (raw, json)
Hash identifier:          5QfOWiPUgd8PS/GMswW5suHzJY0I866jnbeAU2iEf2s=
Subject key identifier:   F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521E0A305D57AE20B92C63283EA1841
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209899
                          IP: 45.65.96.0/22
                          IP: 185.136.244.0/22
                          IP: 2a09:300::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:e0:a3:05:d5:7a:e2:0b:92:c6:32:83:ea:18:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7c:27:c5:90:ea:4a:06:59:85:d8:eb:25:d7:
                    9c:f1:c1:85:ce:7c:4b:86:ae:d8:5d:b8:77:42:24:
                    a4:48:73:ce:ec:34:7c:0d:d4:c4:e5:96:44:c8:8b:
                    58:39:67:7d:bb:8f:ac:53:04:ae:32:3f:ee:79:03:
                    bb:e1:74:77:c4:b8:cb:10:bc:88:1b:09:f9:b8:99:
                    db:fc:2a:58:79:6b:34:1d:28:fc:40:52:43:64:67:
                    ba:bf:a0:5d:a3:a4:e2:9d:05:ff:bf:f5:55:ec:79:
                    1a:b9:59:ae:f8:a5:5c:5e:25:53:be:1e:b1:c9:d0:
                    f3:4d:27:26:75:c7:31:3a:c9:cc:7b:e1:ea:21:be:
                    ba:3b:b5:a0:7d:f1:b0:f6:cd:71:e9:ae:a2:ae:7d:
                    fb:5a:ee:35:b2:c6:af:2d:0d:70:32:af:2f:35:84:
                    46:f6:c3:23:27:a5:2c:85:49:f9:98:ee:d2:94:59:
                    5c:18:92:3a:41:8f:0a:cd:38:b3:89:9a:5e:dc:1a:
                    b2:60:77:05:9f:c4:3a:ec:f0:43:f8:d7:64:15:23:
                    4a:6a:c8:80:cd:6b:3c:a0:bc:89:e6:65:53:24:3f:
                    fa:bf:82:9c:6e:5d:e9:49:02:65:f7:2f:8b:7f:04:
                    7c:bf:c2:49:5b:14:ec:99:d4:95:86:54:57:c5:f3:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.96.0/22
                  185.136.244.0/22
                IPv6:
                  2a09:300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209899

    Signature Algorithm: sha256WithRSAEncryption
         25:99:2c:b4:ff:10:30:d5:63:94:3b:f7:87:0d:d7:c9:35:84:
         cd:06:de:fd:e4:27:1e:8b:7a:17:03:cd:4a:ed:55:f0:13:a2:
         2f:69:f4:78:39:f1:ba:43:b0:29:cb:cd:04:82:e2:5c:d4:be:
         be:0a:1c:3b:36:b9:dc:07:c3:0a:0b:19:ad:97:d7:1b:17:72:
         01:b1:45:a7:59:5f:6c:a8:42:d9:42:a8:66:5e:4f:c6:1c:90:
         f0:6e:10:bc:92:fa:67:de:d2:2b:66:e4:79:de:b9:93:be:f9:
         94:a4:6d:05:22:7f:d2:5e:5c:07:42:cf:88:7a:5f:61:c4:9a:
         55:ff:69:64:82:f8:7a:e7:9c:66:cb:73:d9:15:42:fe:92:b6:
         ca:cb:9e:03:67:9f:b7:36:27:25:0e:ea:00:9f:ed:9d:a7:81:
         d4:fb:4d:96:49:89:7a:d2:44:d0:fa:98:32:69:2a:b2:db:4d:
         42:1c:0d:17:46:3a:94:e0:a8:df:ad:66:87:3c:3f:a1:dd:28:
         8d:48:e9:da:ac:4e:8b:9f:fe:1f:dd:04:7b:23:de:09:a5:88:
         18:5f:4d:d4:7f:9f:d9:92:58:1b:dc:8a:65:8b:ee:54:dc:5d:
         3d:d4:57:d7:7e:a3:11:e6:2a:74:f5:0b:d2:ca:c9:b1:cd:d8:
         e5:84:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----