Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
File:                     A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer (raw, json)
Hash identifier:          LlNuwN8Yj+cXBt/VhhIU5FdtHrJW+fOZZ0uLCH0oE7o=
Subject key identifier:   03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D9268CCDA62E76901E7DD84A5216C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206714
                          IP: 91.223.243.0/24
                          IP: 2001:67c:1184::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:92:68:cc:da:62:e7:69:01:e7:dd:84:a5:21:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:42:a0:d8:67:9c:08:43:2e:a5:63:f7:52:
                    a6:1b:5b:8b:c0:cd:08:7f:e1:49:35:00:49:d8:e7:
                    ee:11:94:7f:88:d4:81:b2:f6:08:35:00:5b:ad:02:
                    05:c8:8a:ea:37:66:dc:94:d8:de:84:62:50:24:c0:
                    bc:4c:a7:d8:dd:67:80:9c:65:6b:23:77:58:54:5f:
                    f9:f2:ff:9c:64:9f:44:a9:45:c7:50:72:5c:9d:f9:
                    e4:ad:ab:57:5a:22:3e:96:1b:47:1e:e8:2e:ec:70:
                    b2:55:72:a4:51:60:1a:9d:00:37:f0:e4:36:30:ce:
                    00:6e:be:3b:51:67:32:ca:d8:f7:1e:43:c2:07:b5:
                    a6:ae:7a:ab:e8:46:95:b3:6a:1f:3f:92:d1:d8:61:
                    7b:7b:55:18:39:08:d6:a1:8b:56:32:e6:28:1e:05:
                    2a:36:e5:48:a9:40:05:9a:3a:25:fd:63:e9:c9:0f:
                    2f:a6:76:0d:aa:1e:2a:bb:7b:61:67:a9:2c:a0:d7:
                    9b:a2:c3:a1:de:6d:c3:79:f8:dc:85:9f:98:c8:e4:
                    b1:16:5e:77:32:6b:89:18:84:76:d6:dc:07:14:59:
                    99:98:96:99:49:ba:97:9a:68:39:45:32:b8:fe:1a:
                    fa:0f:f2:d4:45:ac:2d:96:8c:4e:fc:e3:f5:71:eb:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.243.0/24
                IPv6:
                  2001:67c:1184::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206714

    Signature Algorithm: sha256WithRSAEncryption
         b0:98:0e:08:d4:33:8a:52:34:00:a1:16:55:65:b9:9e:c4:c4:
         38:83:3d:7c:69:43:d6:8c:5d:5b:f9:73:1c:6b:0c:fe:dc:ce:
         22:42:e1:0a:33:c1:0b:45:5f:a2:92:c5:cf:63:d6:33:eb:58:
         f5:29:77:84:37:53:ce:c4:25:91:d9:70:48:03:12:36:e9:24:
         00:7f:7c:a6:0a:8d:9a:c7:53:a3:4f:4c:8d:a7:63:7f:9b:c1:
         fa:9c:58:ee:44:eb:35:52:62:9e:aa:03:eb:3f:61:ae:62:f4:
         8c:c1:70:67:d5:af:2b:d2:13:99:96:4d:17:e0:b7:16:40:47:
         55:ab:e2:6c:2a:92:9d:19:10:35:80:15:e6:5f:d2:6c:ab:6f:
         01:c6:a7:2d:44:a1:ad:87:4f:c6:a9:fa:53:2a:6a:ff:e8:d1:
         5c:52:72:cb:ee:1f:2a:37:d7:0a:7c:fd:0e:6b:f4:6d:06:3b:
         6b:2f:c2:69:bc:6c:be:91:9f:9f:4e:fb:08:7a:a0:40:2c:22:
         c6:89:04:ac:56:96:12:f0:e7:0f:0b:08:b1:33:f1:c6:96:94:
         88:3d:43:53:66:9a:7b:d7:c2:f5:57:94:a2:e0:54:34:6b:77:
         6b:eb:35:a4:13:42:15:78:21:9f:d6:1a:ff:72:dd:0f:b8:d6:
         ef:72:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----