Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
File:                     EIr56cVlKzWESy5dS1N-n81EUvM.cer (raw, json)
Hash identifier:          tSx52MBt4jKqNQq6Eo/enU0V4vzP793nK4KcqtnLm3A=
Subject key identifier:   10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDCE31BE1DA8431131EA1BD933369D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211790
                          IP: 91.201.200.0/24
                          IP: 2a0a:8080::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:ce:31:be:1d:a8:43:11:31:ea:1b:d9:33:36:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bf:62:23:bf:17:f4:b5:dc:86:fe:84:96:e9:
                    66:92:05:3c:0c:fc:d6:6b:34:2b:a4:f7:62:96:a8:
                    9a:1c:d3:8a:d6:00:6c:15:1a:c1:81:04:de:5d:4d:
                    34:2f:dc:2d:11:b3:53:5f:5c:ce:50:12:3c:ae:70:
                    3e:77:25:63:ac:4b:90:cf:25:9f:ef:2d:d1:96:87:
                    81:ed:65:3f:62:3f:2c:a5:f4:dc:5e:1e:e9:33:da:
                    6b:59:37:f6:eb:d0:8a:b1:77:9e:9e:8f:82:3f:1d:
                    22:9e:6f:35:18:e9:37:74:65:81:67:60:66:7c:a3:
                    3e:ee:ca:12:90:05:45:9b:52:f1:a8:f2:11:3c:eb:
                    85:8a:28:91:9a:8e:e3:20:2b:06:31:1b:df:89:7f:
                    b6:59:96:e9:73:d5:2c:a1:c8:54:36:a7:82:7a:2a:
                    e6:eb:61:4c:4a:12:41:f9:dc:37:e0:ea:d1:81:6b:
                    71:7a:28:ef:f9:a6:6d:d3:78:93:2b:ef:ff:1b:df:
                    4a:4b:b1:36:be:04:85:2f:f9:ed:b5:10:de:23:eb:
                    bd:7c:e8:c5:d3:0a:40:6e:b5:87:45:74:c0:a6:7a:
                    2c:2b:c1:5b:93:77:fb:a0:b4:53:a7:0f:0a:d8:c1:
                    14:41:8a:f0:4b:f0:b7:e2:0e:cc:76:51:ed:86:cc:
                    04:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.201.200.0/24
                IPv6:
                  2a0a:8080::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211790

    Signature Algorithm: sha256WithRSAEncryption
         96:ce:dc:c4:40:0c:9a:bd:1f:3e:11:57:77:ab:a8:1a:4b:83:
         88:65:94:49:2c:a2:3e:3e:09:d5:dc:9e:98:cc:1d:c0:3d:22:
         06:a0:44:a5:5d:86:fd:66:4a:4d:4f:f6:0e:92:08:46:36:25:
         d5:cf:b4:e1:9e:23:21:1a:02:d6:45:d0:18:0e:73:e9:c9:29:
         69:ee:b8:ce:8f:a9:02:bd:0b:a2:63:d9:73:ac:ad:da:64:12:
         03:78:8e:7a:00:11:ad:95:80:58:a8:7c:26:5c:c7:cf:d6:84:
         1e:34:7d:c4:be:11:e2:ce:29:ac:95:f5:25:f6:76:7d:c8:83:
         a4:77:1f:6f:f7:35:02:13:74:a0:55:a3:42:bb:91:13:66:10:
         d4:a4:5f:cf:ce:bc:76:c2:0b:82:80:64:a5:a2:5b:17:a3:94:
         dd:0e:a1:28:ee:d7:c0:1a:12:a9:5d:10:67:39:3d:51:2e:0d:
         da:13:f6:02:7e:35:22:8d:67:91:61:b7:2b:36:d9:9e:6f:bb:
         c6:4a:04:8e:ed:a8:ee:79:4a:ac:be:87:a8:8c:e5:5f:3a:62:
         3b:ee:0c:31:24:0f:16:d5:85:7a:f5:5f:51:c8:1b:e4:a8:41:
         5a:01:25:59:ae:fe:06:1f:a2:d7:93:a4:79:c1:f4:24:df:a2:
         28:bd:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----