Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
File:                     DC-bLoowUI05GSr9WzTuVvd1l54.cer (raw, json)
Hash identifier:          s7O4bJoirInkJGT9n30VAuqlksHXPseeGkkx+mkfRIQ=
Subject key identifier:   0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5E968685D10C82B3E84172055487C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62254
                          IP: 91.233.141.0/24
                          IP: 2a0e:e180::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:e9:68:68:5d:10:c8:2b:3e:84:17:20:55:48:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:74:1a:66:ca:5e:26:5f:9f:e1:5f:e4:a9:
                    cf:60:b9:69:d6:3a:26:ed:60:c4:6f:ac:31:bf:77:
                    4e:3e:4b:dd:fa:4c:48:1b:51:18:e1:50:5f:dd:c3:
                    61:a4:42:f8:f8:22:fd:76:f4:eb:f6:be:cb:a0:14:
                    da:5d:63:69:e4:ea:35:25:0c:58:1e:14:c7:72:33:
                    00:53:ad:e8:21:f8:ea:bb:c5:34:54:6b:93:9b:30:
                    da:a4:79:8a:db:d6:4b:f6:37:a6:50:de:b9:9a:11:
                    f8:23:2c:e0:70:41:02:d0:ec:b4:60:84:c2:f7:94:
                    29:a8:84:2b:50:f5:fc:7d:f7:10:ba:c4:b2:34:6f:
                    40:d9:7b:dd:02:9f:a5:83:ab:1b:c6:0f:91:2d:ef:
                    a8:cd:42:de:e1:ee:2d:f7:5b:e8:db:e3:74:e0:19:
                    f6:ec:b3:f5:00:56:99:5b:7d:f8:a8:17:31:a0:d2:
                    0d:3b:4c:f4:6d:d9:1e:dc:92:5e:68:7d:16:46:3d:
                    2f:e4:d7:bb:ff:22:0e:74:01:a6:ec:e1:7a:f6:3a:
                    d2:06:a8:bf:de:cd:4b:78:f3:85:7b:85:96:3c:15:
                    3a:74:06:f8:54:da:1b:b6:40:70:f0:e2:5e:ba:9c:
                    d4:90:5c:6f:24:74:f3:af:be:6f:f9:c3:ef:31:c0:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.141.0/24
                IPv6:
                  2a0e:e180::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62254

    Signature Algorithm: sha256WithRSAEncryption
         79:04:d6:2b:18:06:67:ca:55:40:88:48:79:8e:c6:a8:e2:d4:
         34:67:ba:38:d4:c8:b1:ab:3f:84:36:a2:01:fd:f7:e0:e6:50:
         05:6c:30:73:eb:ba:7e:f2:30:58:8d:bd:ba:e3:98:9e:45:e9:
         a1:42:5d:4e:82:3b:4b:6f:2d:a8:1f:87:0f:c0:69:40:8e:5d:
         88:38:9a:15:e4:72:79:a4:f8:1d:80:26:96:58:66:da:6e:98:
         ef:de:2a:87:e3:3c:8a:de:d9:0f:13:26:f9:e4:69:67:36:eb:
         f6:05:ac:27:ed:24:0a:d0:80:e5:88:f3:02:c6:11:79:b8:c9:
         5f:ef:ee:86:3c:7d:4c:e4:eb:8a:1a:a9:b9:93:58:ff:a4:80:
         38:7a:14:48:25:6a:b3:2c:72:fe:b1:06:b2:c4:62:f2:53:66:
         c2:73:81:0d:c1:27:6e:14:23:58:81:e6:8e:f3:58:c7:e7:59:
         88:26:0d:95:f4:43:fa:2c:6a:61:6c:09:5d:78:6d:7e:a4:67:
         ba:80:30:a1:49:7c:d8:80:86:ee:c8:02:09:0b:d9:19:26:85:
         01:30:d6:66:7b:27:fc:04:4a:bf:ed:d4:ba:a1:61:21:06:10:
         f1:cb:e9:d9:a3:ed:2a:f8:64:47:e7:18:06:f3:45:6b:10:23:
         2e:bf:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----