Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
File:                     A-VjR3yiveae95Q5kflTMwV7PjY.cer (raw, json)
Hash identifier:          YcLyFZxNdu6kO58MoRcmV0RJ5wikpl3WspWpgrxnsEI=
Subject key identifier:   03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521FC2EE10236C3B4F872AB9402DECC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214679
                          IP: 45.88.57.0/24
                          IP: 2a0d:3480::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:fc:2e:e1:02:36:c3:b4:f8:72:ab:94:02:de:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03e563477ca2bde69ef7943991f95333057b3e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:3d:c6:a3:dd:15:5f:c5:65:86:3e:fb:41:
                    bc:0b:b1:56:21:df:da:ab:74:8f:ab:76:38:ef:cf:
                    20:30:8e:0c:9b:a6:37:14:a8:b5:ce:3f:9a:49:0a:
                    5f:dc:5d:90:bf:fe:31:5b:ab:a2:43:9d:f5:32:2f:
                    b8:0f:f2:b3:cd:ef:bc:79:f9:ad:3c:b1:7b:dd:7d:
                    6c:f7:dd:55:8a:af:88:33:33:f2:ee:21:bb:71:f4:
                    08:3c:bb:33:ad:89:dc:53:bb:76:f4:b5:b3:fa:0b:
                    fd:08:a2:14:23:7b:80:70:46:ae:cb:c6:89:87:76:
                    5a:5f:69:d2:1e:9d:e8:ba:ea:46:c1:66:85:7b:90:
                    5b:cf:52:79:37:77:0f:f5:ac:60:5f:f6:53:07:11:
                    9f:27:62:ef:c3:40:89:cc:3b:0b:c0:1e:4f:f9:63:
                    b9:f5:ff:01:72:c0:92:0a:cd:2f:df:c2:b3:4f:15:
                    67:48:da:da:6c:b3:51:e4:9c:83:53:da:7e:cf:4e:
                    db:78:d9:6a:cc:99:85:09:5d:69:27:02:99:dd:df:
                    ec:3e:af:13:54:1c:04:50:a9:15:c3:72:8c:6e:82:
                    37:09:b2:5a:5d:8a:bc:60:57:dc:ed:b0:a8:46:35:
                    57:d3:01:43:05:75:9a:be:e5:d7:d8:4f:5a:02:97:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.57.0/24
                IPv6:
                  2a0d:3480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214679

    Signature Algorithm: sha256WithRSAEncryption
         67:e9:a4:2d:b0:fa:f3:ed:46:bf:6a:72:2c:17:a8:a8:b8:d6:
         eb:db:49:1a:9a:db:63:7b:0a:68:07:5a:5c:89:a8:db:00:73:
         65:a7:45:39:e9:9c:d4:81:b2:59:fc:4a:a7:ff:d5:b4:e9:d0:
         66:3e:d2:ed:39:08:ac:76:32:37:40:0e:8c:e2:93:ea:f6:14:
         db:34:86:7d:77:e8:26:c6:48:d7:fc:58:da:9a:35:ed:65:2b:
         26:a5:67:35:64:2f:9d:3d:98:7d:33:af:a9:5e:f9:09:a4:bc:
         ef:cf:d1:70:71:43:91:8e:b1:f0:d3:e6:59:9d:8a:f8:f8:ae:
         2b:d8:59:4b:8e:cf:cb:c8:a9:5f:e6:02:16:3b:00:80:ef:c9:
         b7:1e:09:15:a3:44:cb:63:75:ee:98:8f:82:1f:1d:dc:79:9f:
         cc:f3:80:6a:ec:86:cb:45:89:2f:b8:f3:32:24:12:7e:3c:e1:
         0a:77:da:bc:e3:51:39:7a:88:42:1e:50:d7:ef:b6:85:28:1e:
         4f:b2:46:38:fe:71:b7:ca:24:8c:cc:c6:0d:44:80:48:c9:eb:
         86:77:9a:28:3f:52:0a:ce:3b:e7:5e:3d:b8:d4:98:54:13:54:
         75:01:e4:70:22:f9:eb:1c:82:5d:17:31:a8:f2:43:bc:16:2d:
         9c:28:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----