Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
File:                     9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer (raw, json)
Hash identifier:          TteSzVVaYpP80ddURRa4UET95ORan4pWXWcTup4VgJY=
Subject key identifier:   F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1D8B665CED2970682D18EB19A8758
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58049
                          IP: 45.92.128.0/22
                          IP: 2a0b:dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:d8:b6:65:ce:d2:97:06:82:d1:8e:b1:9a:87:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:c6:9e:37:b5:ec:83:ad:34:d9:38:21:dc:
                    9c:09:8c:99:87:f3:27:e1:26:94:a2:c5:1d:23:cb:
                    37:d0:3a:cb:7c:48:bb:62:01:76:ed:65:68:47:06:
                    80:3e:94:2a:8d:bb:d3:da:11:76:ec:da:ae:7c:55:
                    36:a2:f9:29:eb:df:cb:e0:ca:32:96:86:21:d1:b8:
                    65:12:7c:56:06:8f:3d:8e:a8:88:64:16:04:10:63:
                    0f:d8:fc:a2:5f:34:b3:cf:2e:4b:16:92:0f:eb:a2:
                    d6:9b:5b:2a:15:c2:c3:f8:e2:d7:1c:9d:ee:59:74:
                    5c:31:6d:9b:8c:f1:64:04:8c:5f:d0:a3:17:a4:a9:
                    0c:8e:6c:cb:65:60:dc:d7:92:68:b9:ea:99:4f:bf:
                    99:17:f6:43:57:9c:77:4f:ef:ae:4f:33:e8:52:75:
                    7f:1f:e0:e8:cd:5f:9f:13:dc:8d:5d:f8:18:71:97:
                    4c:ad:a0:b1:4c:e6:f0:9e:a1:ef:03:76:b6:a9:b7:
                    d2:24:72:6e:9a:7f:5a:66:f2:45:f1:53:67:b8:6e:
                    05:4f:ae:1b:44:42:33:65:44:73:78:99:3c:7e:bd:
                    b9:cb:33:3f:4f:fe:7a:32:a3:d8:66:b3:f6:da:64:
                    98:25:9f:73:76:33:23:44:c1:20:f3:da:34:8d:db:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.128.0/22
                IPv6:
                  2a0b:dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58049

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:68:15:97:d1:99:06:87:a6:08:6b:e5:1e:c2:3f:b4:d9:
         7d:b9:df:ee:98:5b:b0:9c:27:71:9c:3c:bd:16:55:6b:e8:8a:
         8f:3c:2e:b0:70:e5:91:ea:b2:cc:42:13:93:bf:29:e8:dd:44:
         af:1f:24:f5:f5:bf:7b:62:d0:7a:a0:bf:0f:4e:da:eb:32:44:
         c7:d5:f7:7e:7f:30:14:c8:51:c1:02:91:41:c2:9b:5e:e3:48:
         75:88:7c:85:d6:82:21:cb:88:14:66:3e:54:62:af:b0:fb:87:
         0e:3e:34:cb:94:fa:52:26:84:f4:b6:9a:18:d3:ce:48:30:fb:
         57:d5:e5:65:b8:0c:07:1d:2d:f6:4b:b8:aa:2c:5c:b0:8a:7c:
         a6:e3:46:6c:75:e8:51:3a:15:6a:4c:cc:56:38:b6:e3:70:e8:
         4c:ef:4c:ee:dd:e6:ac:a0:18:22:94:a9:d6:77:9e:32:1c:bf:
         12:47:ec:bf:3e:88:55:f3:dc:19:de:46:8c:6f:b1:f6:39:a8:
         17:14:8a:07:9b:e7:19:f9:17:c0:c7:9b:6b:e6:dd:f3:bd:07:
         ae:94:41:f7:64:c3:9e:9f:8a:94:87:f2:b6:1c:3c:bb:72:60:
         6e:06:42:a4:9b:96:ab:49:b1:d3:a3:2a:8e:68:f0:78:dc:94:
         0a:75:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----