Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
File:                     8bv5vuUx897i0Du_Tmnvgu7bma8.cer (raw, json)
Hash identifier:          S3VGfBk30ANCkUGXwe6I6/loBMHMwOXaUthgosd9QW0=
Subject key identifier:   F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423692849396C1A07505C9C4B1B06A556
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199248
                          IP: 5.56.40.0/21
                          IP: 185.224.172.0/22
                          IP: 2a01:46c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:28:49:39:6c:1a:07:50:5c:9c:4b:1b:06:a5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:6c:29:5f:a5:d1:ff:02:f9:73:44:0e:43:
                    9b:f2:01:44:e7:8f:03:07:0f:23:37:3c:a1:c4:7a:
                    76:cd:bb:59:7c:36:a6:60:38:ed:67:10:bb:83:cb:
                    0b:0c:33:4f:fe:25:65:0c:5c:55:4e:19:76:c3:f5:
                    0a:0f:81:82:a1:37:75:42:1e:d2:35:6a:b5:8e:d9:
                    95:13:4b:50:de:bc:a6:94:5c:0e:88:50:dc:64:c6:
                    7c:43:6e:15:7f:20:28:4d:9d:03:8c:93:66:02:af:
                    a3:dc:0a:a1:a6:12:30:a7:18:cb:a6:3a:b8:db:f2:
                    54:46:6a:5d:99:90:17:e7:f0:d1:a5:05:3f:31:f0:
                    60:90:51:f3:c7:80:01:04:9d:cc:4c:ee:38:47:9a:
                    52:b7:21:e0:b1:5c:9c:16:61:87:1a:0e:f2:96:7a:
                    f3:7c:41:5b:70:27:fd:24:69:ea:dc:d6:79:22:da:
                    06:63:c2:36:00:84:cd:78:a6:bc:b0:07:1b:27:5c:
                    80:2e:cf:18:2b:28:3c:0a:e2:51:63:cf:cb:a9:02:
                    0f:a4:ce:c3:2d:94:34:3e:fb:72:28:fc:47:6c:41:
                    ec:b6:23:7c:e8:23:6a:28:a1:7f:c3:e1:b7:ad:b9:
                    ba:db:65:cd:92:4e:c9:97:a3:b6:d2:ec:cd:31:52:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.40.0/21
                  185.224.172.0/22
                IPv6:
                  2a01:46c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199248

    Signature Algorithm: sha256WithRSAEncryption
         4d:7f:3a:c4:ef:bc:cc:f0:19:59:a8:b4:8d:71:91:53:aa:41:
         9b:72:e6:e2:c4:34:82:eb:fa:fd:ad:17:c1:4a:23:94:3c:fd:
         b7:17:31:a7:f7:e0:d8:50:85:0f:93:df:ac:c8:8b:18:de:7a:
         ce:2d:6e:f7:41:ed:a4:41:ea:3d:5b:c9:85:87:0c:88:4f:f4:
         61:35:9f:1d:61:6a:53:b9:3e:f0:ad:4c:08:4a:e7:31:c3:04:
         05:2b:ae:6c:cc:82:a6:90:30:cb:73:39:2d:58:8a:f9:5f:0d:
         49:dc:b8:02:01:0d:47:fb:89:c7:e3:75:a9:e4:22:9e:85:9d:
         32:5a:81:1b:e2:19:7e:82:36:4c:76:c6:f7:9a:e2:09:c3:a7:
         be:e0:d3:ea:64:2c:1c:e9:fd:1b:e7:e6:7a:2b:d0:7e:ef:54:
         79:89:8f:17:eb:3f:d8:4f:07:91:3b:ca:af:8c:5a:a4:7d:52:
         ed:32:e1:01:43:ca:5b:4a:97:1b:04:60:d1:59:cb:3d:36:1a:
         69:88:dc:02:fd:76:78:22:07:19:ef:0a:18:ca:e6:5a:6a:c4:
         93:2a:4e:52:68:0d:e7:73:50:e0:33:32:50:29:fc:ec:c0:dd:
         b3:f6:ce:c1:99:35:4a:04:8b:e7:48:86:95:c1:a5:af:11:86:
         8f:2d:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----