Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
File:                     DjGYqYJ97q-rHSe1U3lPRLkabAY.cer (raw, json)
Hash identifier:          sm+5KBbGFw4RZ/nztW4X3uH03QOtB4aa11BGPwjqKW4=
Subject key identifier:   0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA8FB34705C70DA627ED99DE15438E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43436
                          IP: 185.6.140.0/22
                          IP: 193.58.247.0/24
                          IP: 2a03:740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:8f:b3:47:05:c7:0d:a6:27:ed:99:de:15:43:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:ab:ee:79:ac:81:73:13:c6:b1:96:5c:13:
                    30:ce:f0:ef:63:eb:a2:4f:d6:d0:cc:2d:9e:1f:d4:
                    37:55:61:0d:41:1b:15:a2:5e:fe:16:44:af:73:5d:
                    9c:cd:e9:d5:8b:8c:88:af:1d:37:dc:54:ff:33:36:
                    a1:06:78:47:4d:78:39:02:18:37:2a:c5:c8:72:ed:
                    6b:8a:28:e1:38:58:69:af:2b:26:bf:b9:ae:49:0b:
                    4e:68:e6:05:b0:d0:a2:b0:f7:cf:1f:0e:3b:b2:f5:
                    0b:31:e1:a2:d9:81:56:60:85:fe:fe:2e:45:20:40:
                    4d:4f:a1:e4:2d:e3:37:47:58:2a:0f:c9:15:91:b8:
                    2a:80:29:fa:da:cd:10:48:15:12:08:42:e1:84:1e:
                    f6:b0:84:d7:34:e4:2e:26:f1:09:09:45:df:59:90:
                    3f:b3:00:ba:ef:5a:a0:41:b1:ea:75:01:ca:b0:f2:
                    9e:0e:e0:75:f8:9c:d3:fd:b0:06:b6:c3:2e:fd:1d:
                    b7:67:40:85:e0:f0:6d:3d:ef:db:3c:42:c1:d2:1d:
                    7c:98:16:3e:47:07:28:84:aa:53:6d:9c:98:2c:e9:
                    43:7d:73:ad:6e:f0:d6:b6:45:f9:81:2c:ba:fb:b0:
                    72:53:dd:97:db:c8:5e:ed:22:c6:89:a9:d7:e6:9d:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.6.140.0/22
                  193.58.247.0/24
                IPv6:
                  2a03:740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43436

    Signature Algorithm: sha256WithRSAEncryption
         84:6f:bd:99:3e:84:3f:7f:db:84:39:94:04:dc:58:43:1d:5b:
         df:bc:0d:c3:73:14:22:33:07:f1:cc:bb:9b:1a:2b:ab:86:7a:
         e7:ae:7e:f7:e3:f6:dc:d7:76:21:d9:1c:d9:a2:93:ea:42:3e:
         9c:92:cf:44:7d:16:5b:a7:08:0d:a1:91:b9:85:b5:e0:3e:f4:
         cc:ed:db:df:ed:62:81:25:5a:48:35:d8:d1:13:85:a0:75:9a:
         75:87:e3:19:38:6c:bc:35:ca:cb:b3:de:81:f9:23:05:49:0f:
         1e:b7:37:bc:77:fe:85:c6:63:5c:78:63:ce:4e:f4:ef:85:56:
         71:e5:5c:b9:c7:38:87:b8:88:c3:a3:9a:7e:ba:a9:00:d2:f3:
         07:37:a2:72:0f:5c:c9:4a:d0:30:83:4f:df:da:30:27:68:fd:
         2f:aa:09:9c:d4:ca:51:fc:3a:df:a8:25:c8:92:eb:9b:53:2d:
         6e:61:67:ad:c0:99:f6:cb:b1:f9:16:4f:94:6b:15:94:04:ab:
         90:79:85:0c:93:ba:43:59:43:9b:3d:c6:2d:7a:0c:20:56:b9:
         3f:af:d5:b3:40:c3:66:57:5d:9e:0f:9a:37:95:23:1c:2b:0b:
         61:85:4d:57:58:c9:1d:ee:9a:2f:b3:6d:56:2a:e0:6a:48:9a:
         ca:14:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----