Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
File:                     DoMf1wxr03oqddeg6sAxyS2o4YU.cer (raw, json)
Hash identifier:          iJal1IeMWruAZ9M2owW/ALNoekHIu7FL0k8aWoBSpg8=
Subject key identifier:   0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521A0BD1C3F2033FD293FEA84F3CA04
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212091
                          IP: 45.147.85.0 -- 45.147.86.255
                          IP: 2a10:b580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:a0:bd:1c:3f:20:33:fd:29:3f:ea:84:f3:ca:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:25:ff:a3:8e:a0:c4:27:59:3c:0d:43:cd:
                    2d:ad:e9:db:8e:3b:a9:21:b1:a9:87:d8:87:20:bf:
                    9b:cd:80:c3:81:15:5f:6c:e7:3a:16:48:e5:52:f6:
                    6f:5e:16:a8:e5:16:c4:03:00:5c:d8:f7:24:15:3f:
                    d9:f6:a1:11:1d:38:7b:08:d6:74:5f:64:8a:3a:bb:
                    28:4c:92:cd:53:e4:d3:4f:43:80:c7:0c:3a:62:f1:
                    ce:fc:c0:7f:e5:3b:b5:ff:b2:58:1e:3e:5f:6e:62:
                    01:4b:98:e5:94:a2:ca:e3:34:b5:5d:12:0c:7b:3e:
                    46:ee:5b:35:d8:bd:05:8b:9e:f5:94:da:f5:26:eb:
                    c5:a9:2e:e2:eb:21:5c:08:3c:60:79:85:69:50:8d:
                    61:f9:58:4a:65:72:f2:38:5e:73:f6:3a:26:62:ed:
                    df:f6:2f:68:d8:77:de:6c:6b:b3:1a:2a:56:ce:92:
                    82:d9:da:20:13:c4:7b:e7:ac:95:b5:4f:d9:a4:90:
                    92:65:46:a7:47:aa:34:75:e2:cd:04:d0:1e:75:e5:
                    91:72:16:51:6c:0b:b5:c7:67:86:67:7c:a4:eb:f5:
                    ac:00:48:7a:0f:aa:c4:32:c8:a7:c4:c6:2e:5d:1a:
                    e6:9a:da:29:93:6b:f5:a2:90:65:7e:27:f9:0c:1e:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.85.0-45.147.86.255
                IPv6:
                  2a10:b580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212091

    Signature Algorithm: sha256WithRSAEncryption
         74:85:49:4d:77:45:9d:c2:91:63:27:0b:bc:f1:1f:4e:08:ea:
         27:bc:86:7f:79:8d:ae:a9:a8:3e:f8:df:8a:1b:75:d6:a4:09:
         41:a9:83:00:c3:72:ef:37:25:4c:46:31:fd:84:f0:72:f3:5b:
         60:b1:16:ba:b3:25:8d:b0:39:be:17:cb:1b:89:fd:eb:4e:2d:
         f6:8c:66:00:35:0c:1f:25:5e:67:55:dd:fe:b4:3e:a4:39:3f:
         8a:c1:24:d9:41:4d:d0:f2:6c:ca:91:76:6f:f9:9e:ee:ed:8a:
         41:bd:a6:2f:36:86:71:76:46:78:c7:8c:e9:7d:03:06:8e:4f:
         fc:71:72:a9:e0:57:6b:89:29:2a:60:01:8f:69:b4:cb:d0:f9:
         cd:94:8f:9b:28:1f:70:da:44:53:ad:03:5f:de:5f:3f:f3:27:
         74:92:44:e6:dd:b8:7a:33:d8:f4:7a:93:a3:3f:f7:05:29:4d:
         0a:6b:6b:64:da:91:c8:1e:15:fd:19:46:e6:3c:77:2f:e6:ad:
         97:45:24:bc:8c:13:86:d1:04:1f:7e:42:4b:6f:a7:56:bf:db:
         80:d6:ba:ef:ff:66:c5:f2:4a:34:a2:81:3c:98:7e:12:14:b1:
         86:2c:22:ce:9c:e0:ae:22:ac:72:9a:bb:48:a2:83:db:fc:8a:
         f6:8b:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----