Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
File:                     8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer (raw, json)
Hash identifier:          LxNnlCW0SuHgOWG95c1TeWqdGFTy03pzK2Elr2+JuA0=
Subject key identifier:   F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B32E40316B3EF6A7F63CBCBFA2FD2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214973
                          IP: 185.18.221.0/24
                          IP: 2a13:2c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:32:e4:03:16:b3:ef:6a:7f:63:cb:cb:fa:2f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:04:a4:4e:6f:d9:3b:2d:21:8d:61:0c:5b:
                    f1:cb:94:c1:ce:38:ef:15:12:86:cb:e2:8f:a3:b8:
                    01:98:97:12:10:33:0a:f7:a6:0f:93:1f:5e:54:5a:
                    42:ea:51:06:7d:fa:50:39:94:f9:4a:35:67:7a:f7:
                    57:71:e9:7c:6e:c6:36:9c:07:af:e2:a7:67:dd:09:
                    d0:04:d1:fe:f0:da:c1:d4:c5:7e:4d:a0:e8:3f:28:
                    ec:a8:8b:14:cb:93:94:2e:db:51:af:de:2c:f9:6f:
                    04:8a:18:b7:cf:ae:84:ce:ce:62:06:e1:96:e7:30:
                    2c:9d:c6:fe:1e:d4:ff:64:98:7e:a0:13:10:89:05:
                    83:1c:a3:3a:c5:a0:d0:82:a6:aa:65:90:92:ab:cf:
                    8f:b8:32:fb:5f:5b:65:a8:0b:6a:0b:a7:77:a3:60:
                    72:f5:b6:7c:4e:4a:ad:d0:12:e6:1a:c4:bf:84:ff:
                    99:13:bc:fa:98:6a:66:5b:ef:2d:73:22:58:b8:fb:
                    1d:32:4f:9f:f4:58:67:57:29:9f:e6:29:80:11:6d:
                    e6:57:c2:12:73:c3:f2:85:2b:de:89:d8:44:f2:6b:
                    f3:f4:63:c5:2d:66:ea:da:43:5e:e9:4d:46:53:08:
                    1b:9a:1e:75:19:e7:a4:56:b8:6d:89:32:13:4f:48:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.18.221.0/24
                IPv6:
                  2a13:2c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214973

    Signature Algorithm: sha256WithRSAEncryption
         85:25:60:50:77:3b:dc:70:e8:91:fb:fd:b0:6c:e1:6b:0c:bd:
         66:35:23:f4:b4:62:31:d0:b8:70:cd:af:00:42:f2:9a:b2:f4:
         d9:57:3a:43:78:79:81:9e:83:a1:94:5b:e6:90:34:50:27:37:
         9f:71:73:a1:90:e8:5b:a2:dc:90:9a:14:fd:07:4f:de:99:87:
         3b:64:bb:69:57:a4:70:4d:ea:fa:f0:fe:aa:91:e0:e8:27:8c:
         db:2f:d1:e7:37:35:bf:4e:5f:81:c2:14:6e:24:b3:88:ad:02:
         37:08:93:33:36:f0:78:2f:e3:4e:1a:92:89:e7:a2:7c:e7:86:
         cb:36:73:6a:ea:f1:ae:c8:01:7c:b8:da:7f:97:95:ce:40:b7:
         bf:51:b9:bc:4c:4d:55:85:d0:c2:08:54:3e:71:84:b5:66:9f:
         4b:fb:fd:65:25:29:7a:8a:46:83:d9:fc:32:18:c9:b2:46:06:
         93:da:e1:0c:6e:04:70:68:ee:1c:72:68:fd:e5:44:84:0a:7a:
         ec:1c:e9:60:07:3a:3d:41:86:5b:f5:be:57:73:31:c8:1e:d4:
         d0:1e:fd:7a:8a:74:d6:fa:37:85:1c:42:c9:62:18:36:26:04:
         f0:31:1e:ee:43:51:42:8a:2d:0a:dd:ed:21:37:45:23:6a:39:
         c3:5d:a6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----