Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
File:                     AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer (raw, json)
Hash identifier:          HT2eqdMJtyYyaNzTVM2k4R266WAj2mYjWxNsuMZ/usA=
Subject key identifier:   02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E3CA26C1BEC421D5B675F037E76EA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201108
                          IP: 91.206.113.0/24
                          IP: 2a07:61c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:3c:a2:6c:1b:ec:42:1d:5b:67:5f:03:7e:76:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:34:52:1e:5b:2f:72:8b:45:46:55:18:1b:
                    2c:c5:06:dd:25:f4:a6:46:3b:9b:fc:9b:74:44:01:
                    2c:cd:83:42:3c:9a:c0:23:5e:8b:91:8c:11:1d:39:
                    99:75:4c:d7:ce:a4:7d:bb:71:aa:72:11:4c:69:6c:
                    9a:0c:d7:b9:77:5c:eb:6a:5e:8c:52:fc:ea:76:3c:
                    ca:c3:01:17:64:1f:b0:90:f1:43:0d:ce:04:88:73:
                    4a:f2:d6:68:73:5a:b7:83:65:73:d9:95:30:b4:8c:
                    74:14:fb:97:b0:24:bc:ee:1d:1d:e5:f4:2b:71:e9:
                    4e:6c:35:84:78:63:0e:a1:e5:5f:17:ab:87:c4:57:
                    f6:d2:c1:3a:63:dc:1a:56:3d:e9:6f:47:a6:e7:4f:
                    85:9e:28:92:d8:91:b6:56:65:9a:8e:66:76:11:4c:
                    c4:f2:2f:83:28:90:e5:0c:36:54:f1:26:94:93:98:
                    3a:a4:5b:04:30:d0:e7:0e:d6:e6:43:92:17:83:af:
                    68:f7:f2:da:cc:3c:df:e7:f5:ee:36:37:28:3c:dd:
                    4c:a0:86:9b:96:6c:51:5d:f7:ca:ca:a3:12:4f:7e:
                    74:72:54:ee:f6:1f:d9:5a:a3:2c:c2:9a:0b:ba:ad:
                    dd:07:af:5b:77:59:2c:ca:77:0b:2e:fc:8b:04:38:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.113.0/24
                IPv6:
                  2a07:61c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201108

    Signature Algorithm: sha256WithRSAEncryption
         09:3e:2c:4f:34:5e:2b:07:37:2f:64:b7:0a:89:52:15:0f:c0:
         00:65:c1:a0:43:65:25:49:87:69:b3:35:7e:7c:10:5f:09:ca:
         af:3f:5e:63:dc:74:13:58:ad:84:49:b0:94:df:54:80:2d:89:
         95:e1:a6:ce:06:61:2a:5b:61:b8:31:a8:83:04:7a:57:24:82:
         9a:6e:47:58:2f:d5:c1:7a:e2:97:72:7c:0f:2b:a6:6d:a3:a5:
         23:a1:e4:fa:21:c6:d3:b9:2e:fd:5d:1a:81:c4:f6:f3:eb:e1:
         dc:03:8c:1d:41:fa:39:d0:ae:ed:32:ff:9a:a1:60:38:9a:f2:
         57:95:25:53:79:27:44:c3:fa:3b:88:38:24:07:bd:a0:dc:90:
         f1:de:91:0a:74:dc:95:dd:8f:0c:5f:9f:8b:e9:cc:10:13:1c:
         b3:f1:51:79:8f:98:75:fd:68:1e:6b:86:c0:78:39:67:ec:d6:
         45:28:e8:d3:a8:fd:49:9a:36:2d:de:c6:22:a8:77:28:f6:a2:
         80:c9:29:3b:86:58:76:da:2d:a8:4b:22:49:ab:a7:af:0e:f3:
         99:ad:53:b7:7b:f7:f9:d5:cf:43:6c:93:be:14:a5:ba:93:5a:
         22:d9:de:21:fc:27:95:8d:52:33:e9:e3:3f:ec:9a:8a:6e:fd:
         1f:64:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----