Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
File:                     ER2JVJLtS2nVqm7aX3Av52Oie6A.cer (raw, json)
Hash identifier:          2rYVca5Wwd3DzTH1ED4Q1zOrDgSPtJVVhuCUxNdj6Hg=
Subject key identifier:   11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D97C7690D9A95E1F01E944711E153D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 130.125.0.0/16
                          IP: 192.42.42.0 -- 192.42.47.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:7c:76:90:d9:a9:5e:1f:01:e9:44:71:1e:15:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:11:eb:00:79:3f:4a:fe:b9:fd:d3:ef:47:
                    04:50:8e:67:3e:9f:3e:1b:37:fc:00:da:4d:e8:3c:
                    f1:81:83:dd:a0:04:ae:63:01:0a:7a:61:5d:73:5c:
                    5c:0a:1a:d3:46:15:b0:04:a4:b3:c1:8e:7b:b5:19:
                    b1:92:8d:cc:4b:ce:de:f2:74:b6:6a:df:66:63:9c:
                    e0:b5:a9:e0:0d:69:f8:2d:a5:79:4f:98:9c:e6:fb:
                    60:30:8d:78:3f:12:bd:ef:7f:a4:68:88:b6:a2:a9:
                    bc:82:d3:35:88:82:fb:0c:a2:cd:fb:bc:35:35:f4:
                    4c:10:0f:19:c7:85:90:90:7c:19:78:21:da:89:7c:
                    95:94:b2:b1:f6:97:74:14:62:c9:42:ed:12:03:ff:
                    24:44:05:ee:b7:13:f9:b3:81:d0:ba:64:78:98:00:
                    d7:c6:dc:aa:24:fe:04:55:7e:6e:44:d9:cb:5f:c9:
                    a4:32:52:4b:84:55:24:c1:eb:5b:8a:8c:af:76:a4:
                    2a:6a:6f:22:4b:60:74:94:54:e5:7c:19:99:01:c3:
                    e4:fb:46:53:e5:e0:86:03:aa:fc:ec:97:1f:eb:8f:
                    2c:9a:4e:26:5c:cc:b6:57:c9:e7:87:d2:69:8c:09:
                    91:29:6b:8c:c7:33:0c:53:ac:b8:96:a5:00:e4:70:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.125.0.0/16
                  192.42.42.0-192.42.47.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:93:32:15:82:97:1a:2a:5d:10:8d:81:bf:8a:2c:7f:9d:99:
         1a:43:31:a7:b2:0a:31:e2:4e:a5:a3:d2:cc:bf:2a:6a:53:18:
         cc:c7:c2:75:a5:19:14:4f:8b:5c:b1:12:7c:43:be:1b:6c:32:
         db:7a:81:42:33:d8:ce:86:96:72:3b:a1:9c:db:cf:4e:a6:fa:
         97:1a:dc:6a:ee:df:c0:f7:46:2e:d4:d0:37:9e:1c:1a:60:56:
         1c:57:dd:90:5a:d6:77:a3:1d:8f:e4:ef:69:c6:e7:3f:c8:b2:
         19:7c:d1:7b:72:6d:da:53:c0:f2:3f:e5:c7:4f:bf:b9:45:19:
         b5:3d:3e:0a:af:cf:58:b1:c7:8e:59:3f:02:db:31:df:69:e3:
         c6:c9:c8:f1:ff:a6:cd:ad:43:d7:a8:6d:3e:80:f2:31:56:b8:
         6a:62:0a:bc:f4:d1:fd:4a:14:dd:b1:83:23:97:cf:81:70:7d:
         e4:85:af:b5:d9:7d:20:23:4d:cf:ac:42:34:2d:06:95:d6:a2:
         59:f1:87:a4:ba:97:d0:09:db:29:b3:6e:f2:e8:42:74:18:4c:
         f0:ba:81:8d:34:44:f3:16:71:e9:79:97:06:6c:37:c7:9f:00:
         96:54:f4:6c:8a:47:90:f3:41:e4:85:1d:6e:72:3a:7a:23:3a:
         df:1d:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----