Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
File:                     ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer (raw, json)
Hash identifier:          aYMYauxP/4pyd63AK6tzI3F1oNYiNNRckNdJYZHa90E=
Subject key identifier:   11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266AF95C07D9294D5FE3BFD3FD816752
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:48:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 31050
                          IP: 185.101.12.0/22
                          IP: 2a06:1ac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:f9:5c:07:d9:29:4d:5f:e3:bf:d3:fd:81:67:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=111b09710acdb72086d658e90d8f025fa6a111b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:2a:20:cc:9f:aa:f2:c5:55:bc:13:87:e6:
                    0f:55:de:9d:fd:d4:e7:c1:ad:74:fb:8a:7c:61:a8:
                    9d:1d:c1:c7:37:6a:25:6a:1f:d2:2e:24:4c:46:7b:
                    d8:03:94:ef:59:0e:85:82:c7:fe:8a:85:96:73:e1:
                    8c:72:dc:60:8b:e2:31:79:85:cf:08:4e:56:58:9a:
                    d8:d5:0d:ef:f5:57:a5:d6:b3:01:e2:24:da:fa:b7:
                    eb:c4:4b:fa:b7:98:2b:13:98:1a:0a:78:0b:e6:b0:
                    d8:ec:33:22:e5:5e:3f:ac:fc:5a:a8:73:60:23:bc:
                    3a:0b:8b:11:d4:82:81:86:52:66:5a:33:62:c9:f3:
                    cb:a4:ce:9b:29:c3:ad:4d:eb:04:e8:3f:17:7a:8e:
                    68:6a:4a:3d:af:d5:79:f5:7d:bc:53:67:35:66:b5:
                    ea:22:30:d1:1b:f7:15:43:eb:e2:ad:84:47:27:7a:
                    db:50:79:54:84:96:7f:69:10:d9:73:d5:ec:4e:1f:
                    ad:aa:2f:fa:1e:b9:a2:79:f0:c6:30:13:5d:0b:d1:
                    9a:18:e2:23:33:2b:c7:da:7b:43:74:06:d2:d9:c5:
                    49:45:bf:dc:4c:03:0d:84:be:dc:be:94:bf:4d:8f:
                    6f:02:77:99:ca:a4:ae:b5:7c:20:f9:a3:b4:72:e8:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.101.12.0/22
                IPv6:
                  2a06:1ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31050

    Signature Algorithm: sha256WithRSAEncryption
         48:b7:77:40:55:ad:ff:28:67:7d:f1:58:32:ef:02:dc:4b:ab:
         9d:01:58:d4:a4:a5:27:ba:f9:d4:58:4e:08:9f:1a:48:62:c5:
         2e:52:eb:8d:69:be:83:ec:63:d5:fd:dc:90:ca:0b:15:5d:6e:
         e7:2d:59:39:de:f5:d6:1f:fb:e6:a9:36:46:57:e5:90:5d:9e:
         ee:ba:c2:5c:28:70:7d:2a:65:c8:a4:95:a7:b2:12:3e:0b:c3:
         81:ab:52:d0:41:98:52:87:52:91:69:89:2f:18:dc:e8:3f:24:
         97:70:ef:78:73:0c:7e:da:1d:4e:a7:d8:f8:d0:e0:0e:85:02:
         4d:43:73:a1:cb:fd:8e:5c:36:41:df:e4:7d:c8:cd:64:0d:86:
         f1:fd:39:ca:1e:42:13:26:6b:1f:c5:b0:93:e0:74:62:c9:cd:
         75:ea:2e:27:9e:84:19:34:0d:4e:e6:88:1a:90:1c:2d:48:a7:
         db:bf:c3:0b:ff:be:96:4a:73:86:76:7b:ce:f2:85:03:6a:a8:
         8f:00:1e:62:25:e9:da:14:fb:0a:df:e1:6f:fb:a3:a9:39:d5:
         7f:da:9a:2c:4b:d0:a9:2f:45:d8:e6:7c:f1:70:33:b3:f7:3c:
         ef:fa:c4:be:4c:1f:2a:1c:c2:4d:a6:83:47:34:66:ea:92:57:
         8f:63:43:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----