Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
File:                     DLvQEU2XGWdQ1IxeElbtBVpeniw.cer (raw, json)
Hash identifier:          BQE1+ZykQgiIoO6xUbvx8JNgJMxmp2mMY7tTkENHbEQ=
Subject key identifier:   0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258FBF93D36A74ABB15D818FC8EFCCB7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60671
                          IP: 185.27.40.0/22
                          IP: 2a04:33c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:bf:93:d3:6a:74:ab:b1:5d:81:8f:c8:ef:cc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:8d:e4:b1:74:9a:2d:70:fc:6d:c8:8c:0d:
                    ca:56:27:e0:03:53:e2:8e:82:44:d9:02:60:c6:75:
                    c6:41:98:6f:12:be:45:4c:92:f2:5e:33:8a:43:63:
                    f8:87:60:53:e7:1e:dc:cc:4a:8c:66:b8:ea:c4:54:
                    c0:59:da:05:27:8a:de:f4:f0:46:3b:5c:b4:66:e9:
                    17:84:d4:99:1e:65:0e:a8:f4:94:ed:d4:96:c6:9e:
                    f4:c0:85:da:e2:c5:29:53:9a:3d:ab:c4:11:f3:f3:
                    72:95:54:80:1b:36:20:6a:f1:49:16:9d:66:36:7c:
                    54:11:19:11:30:5a:94:e6:47:c6:45:dc:a9:09:b8:
                    54:98:29:a8:55:4a:27:73:bc:3c:df:da:7a:55:60:
                    d1:d2:5b:11:0f:a7:4f:cc:a5:dc:01:75:5c:38:fe:
                    b7:b9:ae:1f:13:eb:a9:b8:85:0e:e8:d6:c4:f9:52:
                    8d:ae:d4:65:ec:98:b3:e8:3c:48:ce:bc:ac:a1:05:
                    5a:7d:98:35:d6:ea:41:bd:71:33:9b:6d:4a:59:5a:
                    69:b7:ea:8d:cf:b3:9f:16:2d:6c:eb:f0:df:07:57:
                    6d:39:61:91:51:a3:8c:cf:d6:25:bc:8b:63:9f:8d:
                    a0:a3:95:95:9b:a9:fa:d1:3b:e3:c7:64:b3:06:9d:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.40.0/22
                IPv6:
                  2a04:33c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60671

    Signature Algorithm: sha256WithRSAEncryption
         93:9e:c2:04:c6:fc:ca:7c:58:c1:51:b3:38:29:0b:8e:88:de:
         23:53:e1:f3:0a:85:68:19:a2:3f:46:06:c2:b5:f1:e6:01:ca:
         52:3b:62:d9:c2:b7:4f:79:44:bc:97:c2:df:d3:16:9e:e5:fe:
         c6:aa:a0:c1:4c:4f:02:24:5e:39:a9:e2:46:8b:c6:9b:63:85:
         44:16:b5:59:dd:35:9e:02:4f:aa:b7:d4:29:75:69:ef:13:5f:
         5e:3e:08:c5:0c:1b:e4:81:d5:8c:ba:51:1b:9a:0d:37:4b:65:
         0c:ec:ac:4d:8a:6e:db:33:ab:68:cf:8f:ac:16:ba:da:65:0d:
         ab:16:4b:65:67:44:52:d8:fd:9e:36:f7:74:4c:92:fd:f1:a6:
         79:ee:57:1f:19:63:8b:f2:41:7c:f3:25:d6:c7:57:97:b9:d5:
         47:83:b5:62:43:66:18:0e:ed:f3:c9:82:bf:bf:f6:93:a3:ed:
         0a:11:b5:42:d6:5f:9e:e2:57:7a:db:50:d9:1f:91:d7:a0:e3:
         d6:75:ac:e8:15:be:7b:ca:82:9f:2f:ae:3a:42:ce:c7:38:3d:
         a5:3b:c5:8a:14:5c:38:58:ed:a6:63:97:84:6b:9d:9f:d0:a5:
         2a:ee:70:27:aa:30:8b:9a:53:61:1b:20:9c:ad:da:0a:df:0b:
         d6:0a:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----