Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
File:                     DwJfo1fCCrvxGEJiNGWOYtfccHY.cer (raw, json)
Hash identifier:          dyW2QV2eSsozOvde2UXLYsMgywI1V4fFQ9Ev/vnt1tE=
Subject key identifier:   0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A0F81D7EAED496B34F116CE095AE4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214294
                          IP: 123.100.225.0/24
                          IP: 2a01:ee80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:0f:81:d7:ea:ed:49:6b:34:f1:16:ce:09:5a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0f025fa357c20abbf118426234658e62d7dc7076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:20:01:72:53:74:79:c5:e4:cb:99:a1:e7:3a:
                    85:ca:f7:33:62:42:93:cc:34:fa:44:67:f1:ca:98:
                    eb:04:6d:78:89:50:28:0d:77:5e:8c:ed:fd:d3:34:
                    54:db:b1:1b:43:93:33:e9:bf:64:1b:16:30:fe:6b:
                    78:f3:59:92:a9:d7:5a:6f:46:01:9e:75:f4:5a:e2:
                    13:3e:d1:bd:88:29:3d:54:68:9e:ca:82:cb:6e:0e:
                    26:6d:71:6a:69:64:63:b7:95:5f:72:bb:e2:91:ee:
                    fc:5e:d0:0d:21:23:93:11:ee:f3:6d:65:01:30:90:
                    78:93:c6:bc:25:02:7b:52:0c:ca:01:9a:87:55:fe:
                    72:25:45:e6:c1:4f:b2:6d:72:8d:be:80:68:59:07:
                    a9:54:a5:a2:b7:e7:5a:c5:a4:5c:62:4a:0f:1a:d5:
                    48:72:50:30:7d:63:f8:d7:79:25:2c:37:be:42:e8:
                    b3:8a:ca:75:57:9d:a8:6c:79:f4:1d:bb:16:c1:d2:
                    c7:91:e1:b2:d5:0e:1c:b0:c1:c9:86:20:90:5b:a5:
                    15:a2:ef:13:ca:39:8f:f0:a0:c4:02:42:7f:2c:a2:
                    21:e1:f3:af:76:41:a0:47:6c:88:6c:7b:72:34:db:
                    bd:8e:fd:34:a9:29:35:30:ec:b0:0b:77:83:cd:b2:
                    92:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.100.225.0/24
                IPv6:
                  2a01:ee80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214294

    Signature Algorithm: sha256WithRSAEncryption
         6a:a9:32:7e:e1:b2:8d:b9:48:69:d5:b3:b1:d2:3a:2f:b6:e6:
         fe:d5:60:36:03:af:40:b6:94:8a:7c:46:d1:fb:24:44:80:bc:
         67:b8:c5:36:b4:3e:41:ac:a0:a7:10:93:0e:a6:8e:d6:73:d1:
         57:94:9e:10:9b:e1:7e:44:6b:86:d5:dc:ef:a5:eb:d1:ef:d5:
         0a:f7:b9:83:61:fa:c7:34:80:30:50:14:de:bc:5e:e9:c3:96:
         ab:e9:47:53:0c:11:42:a4:e2:f5:76:92:4b:2f:8a:97:96:67:
         9c:18:b6:a8:51:8b:3e:01:d7:63:45:fe:cb:2c:a1:95:c5:ad:
         4b:d9:c3:36:9c:13:04:05:8e:76:54:9c:c6:74:d2:3c:50:2d:
         a8:8e:eb:67:48:01:68:d2:af:ff:87:4b:f4:6d:2c:2b:9b:a8:
         9f:de:c8:d0:89:32:1f:5d:34:dc:ff:56:a9:f6:11:b7:cf:90:
         2c:d9:e1:e4:a2:c0:e7:90:c8:d6:8d:60:37:0f:df:32:df:f5:
         2c:36:e7:8f:a8:ec:9e:54:27:f5:14:1c:a5:94:36:71:72:63:
         f6:58:47:42:ec:4c:da:28:ec:36:e2:f1:52:e4:19:f0:d5:d4:
         ce:f7:09:2f:9d:bd:ae:64:f9:6b:9a:21:6d:9a:74:cf:cb:20:
         ef:c9:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----