Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
File:                     D8lnTtVfCnZcpdocb6-k3SXioXg.cer (raw, json)
Hash identifier:          1GJoZ3VU0+5AdNTthEXnujI4pM+ZdcLOeS7n1n6nzHo=
Subject key identifier:   0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01954B6DEDBB53197A72193124493FE95E80
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 07:20:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 195.232.0.0/17
                          IP: 212.211.0.0/17
                          IP: 2a02:2a78::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:4b:6d:ed:bb:53:19:7a:72:19:31:24:49:3f:e9:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 28 07:20:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:52:4c:57:70:00:6c:27:f7:89:fa:7b:10:79:
                    6f:82:07:49:75:cc:f1:44:ae:ba:d2:82:a0:6e:5a:
                    6f:53:b9:80:a5:57:81:8d:12:5e:0f:35:4f:6e:78:
                    48:2c:33:be:9a:7e:bf:0c:17:c7:76:1f:cc:d1:94:
                    cc:58:1a:4b:e8:75:6d:45:45:f9:c1:3e:14:aa:3e:
                    9e:02:3a:b8:40:f1:3b:92:8a:e8:2f:47:6b:ab:37:
                    88:de:17:7c:49:be:b2:84:b1:75:3e:91:32:f2:2c:
                    37:5d:c7:8c:49:20:b4:13:cd:e4:5e:04:5f:06:ea:
                    d7:13:f2:f9:92:09:3e:91:a3:b4:48:89:3c:c0:96:
                    26:5c:ac:b4:07:f2:86:f6:6c:8c:6c:0b:e6:6f:43:
                    3d:73:33:ad:ba:df:f2:5b:01:db:22:2e:eb:90:60:
                    3a:11:78:47:18:92:07:2b:d3:f8:b5:0c:4a:b0:1c:
                    85:00:f2:76:d1:0a:b7:8b:c0:29:42:7f:3d:91:06:
                    8e:15:c6:04:05:ac:5c:76:c2:a6:d9:b7:1a:e8:2d:
                    6f:3c:49:12:ee:fa:a2:80:c9:02:6a:94:e1:d4:cf:
                    9d:79:28:75:4f:cb:2e:d9:cd:ab:82:9b:56:0b:a7:
                    73:cf:15:88:55:55:b1:ba:ff:07:6f:68:f0:52:ad:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.232.0.0/17
                  212.211.0.0/17
                IPv6:
                  2a02:2a78::/29

    Signature Algorithm: sha256WithRSAEncryption
         68:90:b7:e1:6e:64:0c:fb:3c:77:21:24:5f:37:14:6d:dd:f9:
         45:12:a5:22:23:9a:95:f6:b7:2b:81:0d:84:0b:fe:e3:d5:9a:
         8e:a6:18:8c:69:bc:2f:09:95:11:b1:2b:4d:1f:f5:ef:bd:5c:
         ca:48:f6:7e:56:36:1b:bf:02:49:c9:38:f5:e5:93:e9:73:41:
         fd:8b:a5:30:c6:9a:97:f7:bf:99:7e:ae:ef:d6:84:59:89:59:
         76:c3:9c:bc:64:44:c8:c3:89:fb:ab:ef:6e:c9:ca:42:aa:de:
         a6:fd:34:2a:8c:a6:3d:a7:aa:49:2c:2f:4d:f8:80:73:50:82:
         98:a3:5e:92:87:5f:d1:c2:0b:e9:bd:ec:93:50:90:e1:37:8d:
         6e:e8:ff:7b:3b:08:dd:6d:f2:0d:0d:9b:7e:0a:4f:9f:de:69:
         84:56:e7:a7:9a:36:81:7f:44:9f:85:bf:f3:07:3a:8b:6d:f3:
         e6:28:be:4a:57:cc:eb:0a:85:0c:82:a0:61:a1:4c:77:b6:e1:
         b3:bf:3f:29:f3:d1:98:06:2a:2c:8e:f7:43:fc:73:16:99:fd:
         c3:d3:e2:dc:39:15:54:df:c2:96:70:ce:31:cf:87:d9:2b:06:
         24:84:09:2d:e2:46:42:06:62:2f:2a:ec:60:5d:3c:57:21:fe:
         c9:e6:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----