Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
File:                     Afq489H7PSo1xPZ6SPb2CD6rpXU.cer (raw, json)
Hash identifier:          1FFHwuG+Lc5CNqBJG2b7fUZIBKh6GQAzRKGk0jsm9EM=
Subject key identifier:   01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FD7990CCF6507DD4E44F34DAAEA60
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203667
                          IP: 185.233.72.0/22
                          IP: 2a0c:d700::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:d7:99:0c:cf:65:07:dd:4e:44:f3:4d:aa:ea:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:76:f2:62:2d:61:27:69:d0:20:f4:db:eb:
                    7a:40:1b:ac:80:ae:67:19:3d:08:9e:ab:d5:79:03:
                    2f:fc:25:b5:2c:21:42:c4:2c:57:5e:60:30:f4:6a:
                    95:66:a7:59:de:c2:ef:8f:aa:3b:50:74:aa:1d:08:
                    b3:5a:7a:8c:03:f9:cd:9c:68:8e:8c:cc:23:03:3a:
                    da:9a:57:e8:b1:bb:15:e2:4b:77:47:22:0e:ab:58:
                    db:38:20:a9:06:7f:91:c4:d1:d9:fd:fc:83:ee:0c:
                    76:ff:7f:8f:ba:4a:79:99:9b:8c:a5:96:c4:da:ad:
                    53:3e:26:75:49:fb:98:0e:71:ff:d3:85:52:0b:27:
                    fb:65:6b:5b:3f:46:4a:0a:c9:eb:a3:a1:0b:b5:55:
                    13:b2:b2:05:a7:51:59:30:11:ee:db:4d:bb:cd:60:
                    e2:50:71:ce:dc:5d:0e:57:20:51:ca:cc:72:15:9a:
                    f1:00:bf:91:3d:2c:5a:8c:87:7a:27:d2:0c:e6:e0:
                    4e:2d:1a:50:5c:e6:b0:b0:76:de:65:67:9c:5e:3b:
                    d7:b1:8d:f5:f0:00:17:d2:43:c2:ca:49:87:d4:17:
                    a9:3b:1f:97:a9:c1:ac:e8:a1:f7:46:a1:e4:12:ba:
                    bc:83:30:43:06:e1:6d:29:e0:53:62:b3:a5:28:4e:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.72.0/22
                IPv6:
                  2a0c:d700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203667

    Signature Algorithm: sha256WithRSAEncryption
         28:25:d2:fc:3c:cb:01:25:ea:6a:ec:05:d5:36:56:79:60:cd:
         61:f4:9b:e6:eb:34:74:fb:1a:cf:c4:53:9d:65:c5:2e:5a:22:
         ed:69:5b:b2:23:18:4f:1c:3e:05:e2:53:85:42:f2:be:f8:3b:
         c9:eb:8d:ae:4a:62:6a:b5:77:d3:c7:f9:38:45:a1:1d:a2:e5:
         16:d6:ab:b9:5b:70:47:58:00:3c:9a:68:7a:8f:dc:00:30:46:
         24:20:da:79:c7:30:5f:b8:0f:fa:3c:28:a8:37:a5:a1:b7:68:
         b4:04:70:52:de:f4:10:f1:45:09:14:b0:05:76:48:1a:62:10:
         27:fe:32:d4:11:4a:a6:bf:5a:98:26:3a:0d:cb:ff:8a:91:43:
         ff:a9:08:e3:9b:00:67:91:9d:93:63:6b:cd:6e:a7:a9:e6:22:
         44:db:25:f6:79:66:0d:61:39:ac:b7:7e:3d:c1:79:78:ad:d7:
         26:47:bd:9b:d0:ab:48:b9:bb:7e:5b:39:f8:e3:e1:5f:25:b9:
         78:00:e0:1c:2d:c4:23:ef:0e:45:a5:39:b5:57:2b:8d:bb:06:
         6e:73:41:ee:a1:2c:2f:e5:72:e6:0d:af:6c:22:c0:dd:f8:9f:
         0c:31:53:e8:15:58:7c:ca:3e:61:56:2c:90:ce:83:9b:74:08:
         1f:d9:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----