Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
File:                     AvvY1yv_u813B2pqbMmU02QoSRY.cer (raw, json)
Hash identifier:          fuT/NC+2Eoz2s214Qj/cWBQI1sutF9QJhYbsZj7xMkM=
Subject key identifier:   02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DFC80753C55046B0FB7FAEBBF2115
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206124
                          IP: 185.194.48.0/22
                          IP: 2a0a:45c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:fc:80:75:3c:55:04:6b:0f:b7:fa:eb:bf:21:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:75:13:18:4f:1d:c1:09:54:9c:1b:e7:e2:
                    2d:58:ab:58:99:88:01:c4:cd:d8:35:65:ef:f5:e3:
                    62:4f:2f:e3:88:cc:b2:3a:0e:97:37:21:0d:ce:9c:
                    f5:a0:ba:7b:bd:36:ce:d1:8a:d1:60:d5:1b:28:ae:
                    0f:1c:5e:ba:3f:e5:04:86:1c:3f:1d:84:c1:7b:c7:
                    0c:a8:e1:37:8b:c5:20:a7:be:78:1b:78:d9:28:a5:
                    ae:71:ab:b9:54:aa:af:b9:32:f7:fc:33:53:29:ab:
                    25:07:27:c1:aa:51:15:9f:da:fe:2f:ef:90:71:87:
                    27:e1:33:3e:e8:82:80:27:96:85:b6:28:42:0a:2f:
                    a5:53:56:0f:a1:03:a4:fa:67:66:26:59:b4:71:b8:
                    e3:ab:a7:75:06:06:b5:dd:37:e0:ff:97:9d:2c:b8:
                    d9:25:1c:3b:50:2c:f8:d8:ea:2e:d8:22:42:1d:17:
                    23:64:09:cc:e6:ae:40:d6:6f:b9:d6:d7:25:0f:3a:
                    e8:7a:c6:64:1b:d9:1c:0a:54:c7:42:31:d7:94:52:
                    f3:48:b4:08:19:04:62:10:e9:35:48:26:dd:39:6c:
                    48:be:66:c9:8a:e5:67:4a:3e:9a:0a:5a:83:d0:b4:
                    af:8b:2e:54:be:db:95:0b:dc:7b:93:91:23:61:8f:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.48.0/22
                IPv6:
                  2a0a:45c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206124

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:de:e9:96:ac:ed:72:ad:e0:c3:cb:e1:06:37:7f:34:b8:
         24:9c:9b:00:8e:8f:ec:3e:78:d8:46:6c:68:06:43:d1:e1:80:
         cb:27:ae:83:50:e7:30:1b:a1:5b:ed:1d:66:89:9e:db:bf:48:
         a2:80:4f:21:12:ca:a1:f4:07:6c:2c:7f:ab:08:58:78:b5:bf:
         10:ed:2e:cf:97:37:cd:a1:66:44:e4:fb:03:2a:2c:ef:17:49:
         93:12:cb:e1:8b:00:19:68:0f:3e:f8:f3:a0:10:6b:97:b7:e3:
         c5:aa:de:e4:1e:25:c6:fa:9c:79:69:e2:68:47:4c:98:48:f8:
         f6:06:8c:be:94:c0:10:49:76:d5:6d:2f:44:e9:d6:34:e3:f0:
         0b:c6:53:fb:68:14:b8:33:41:cf:00:82:ba:24:e4:dd:67:70:
         7b:c4:b5:fa:b2:f8:32:7b:aa:67:29:13:f3:f3:1b:a7:70:02:
         af:59:e8:26:f8:e5:55:96:2a:3d:48:61:b6:ce:87:69:5c:cb:
         94:46:97:0b:29:0a:a8:45:23:88:ab:14:b6:28:0b:a7:93:de:
         f9:6d:bc:5d:b7:73:e5:ab:c4:65:8b:84:29:a4:a5:87:91:1c:
         5b:84:53:47:a5:5e:f0:a7:7e:a8:4c:a4:13:86:a9:99:63:4a:
         8e:81:7a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----