Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
File:                     8UHWZGmLcP-yom9oS0fetsjVmlM.cer (raw, json)
Hash identifier:          2IgR7pYNG6kSx9UKN5XiQTcYghp99jxKil3QgKhfR6A=
Subject key identifier:   F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7CA7A1372AC76A039824537D2B18F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201336
                          IP: 109.71.248.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:ca:7a:13:72:ac:76:a0:39:82:45:37:d2:b1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:6c:54:c1:97:59:c8:7f:25:6e:85:3e:b0:
                    d8:77:57:6e:5f:89:83:f3:8b:34:fd:4b:d0:d9:ed:
                    0f:d0:16:b9:fb:4a:b0:fe:c8:d9:f6:6b:d4:9a:75:
                    89:3b:df:78:80:aa:ee:03:36:95:60:d8:9b:c6:bd:
                    a0:19:c3:9d:b3:ed:1a:97:69:93:0c:05:f8:97:6d:
                    e1:ef:fa:58:96:81:d7:fe:a7:0b:19:30:91:bf:76:
                    ce:41:a1:ba:5b:12:bf:12:52:70:bd:45:d6:23:fe:
                    fd:02:c3:4c:93:52:6e:ba:33:06:b9:c1:1d:9c:20:
                    13:30:d2:e1:c5:ba:ab:be:49:aa:e8:45:b2:c9:23:
                    f3:cf:4a:da:dd:9b:e4:21:51:95:44:ae:30:0d:fa:
                    db:ac:11:f7:3c:5c:c1:46:72:8c:8d:2b:d5:c6:e9:
                    a4:ab:f1:be:78:3a:eb:e6:2b:8f:db:4f:ec:f5:fc:
                    d1:e3:39:3b:f7:f8:0c:02:3f:de:b9:42:76:2e:d7:
                    c3:3b:05:72:0a:de:58:dd:8f:99:4d:d0:87:3e:aa:
                    4f:cb:2c:24:13:05:db:db:00:3f:ce:31:8c:46:8e:
                    cf:9a:0d:cb:8d:f8:01:ee:bf:e8:1e:27:ae:f8:7e:
                    a6:50:81:b4:73:20:24:f6:9d:24:58:17:af:dc:bc:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.71.248.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201336

    Signature Algorithm: sha256WithRSAEncryption
         42:48:c9:0c:b1:a3:fe:6e:0d:ce:48:72:fb:a5:f9:49:4e:08:
         4c:f1:31:c7:e1:bd:b7:32:82:14:3c:f4:53:99:6b:da:19:cb:
         82:e9:d8:5a:83:35:ba:9f:e6:51:77:d0:00:92:a2:02:2f:36:
         01:43:9e:5b:74:f0:73:ca:fc:fc:36:ef:46:29:34:fe:cc:35:
         65:83:36:ed:da:c9:5e:a7:9a:e2:70:56:75:01:8e:53:c3:93:
         a8:c7:ac:ae:6e:db:ed:31:66:ad:62:13:33:b9:e2:49:46:63:
         d3:a2:39:2c:4a:cb:a7:ce:11:7b:fe:4a:46:f2:42:fd:ee:28:
         f3:e3:b9:cb:a4:3c:00:87:15:ab:00:c2:74:56:37:9c:44:55:
         64:c9:8e:a0:b5:ad:a9:77:c2:2b:18:1f:ab:8e:07:c0:ed:c9:
         b5:7d:9d:70:2d:b2:1d:76:00:72:48:95:83:be:96:b0:1d:59:
         77:1a:f3:80:f0:75:3e:37:3f:cc:01:79:34:9a:e0:f1:b0:08:
         ef:c5:06:b7:fe:61:d4:91:9a:e3:11:d8:0f:27:d8:00:f3:e7:
         56:63:d0:16:1a:21:bf:e4:e1:3e:7e:28:65:05:98:aa:c4:31:
         e3:25:78:d5:6a:2f:d5:f2:9a:91:d1:32:b8:c4:07:5d:ea:0c:
         5f:5e:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----