Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
File:                     Elriz9MVwTEZNIRmWsrafAExY-w.cer (raw, json)
Hash identifier:          aNw1C4uEMYT8X8TfasQGQwqcU3tVLMjLXKP5f10vqxs=
Subject key identifier:   12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194244546117766764496128D7ED7DAA966
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204736
                          IP: 185.241.100.0/22
                          IP: 2a0d:4580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:46:11:77:66:76:44:96:12:8d:7e:d7:da:a9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=125ae2cfd315c131193484665acada7c013163ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:72:19:75:6e:6c:46:7c:9c:f5:cf:bd:a4:
                    8a:0b:8b:c6:5c:ac:7e:ee:14:32:79:2e:55:77:3e:
                    b2:72:c2:61:f3:cc:79:26:bc:90:7a:3c:47:dc:35:
                    26:13:83:f8:7b:f8:9e:c0:32:c0:4a:b6:ba:89:86:
                    c4:5a:0e:80:04:3c:96:75:f8:8d:fb:61:47:6e:32:
                    26:2e:78:89:d4:33:66:d0:a9:b5:14:4e:da:9b:85:
                    8f:ad:f9:d4:f8:0d:95:8c:5e:3e:d3:49:2e:da:f2:
                    4b:2b:71:98:0a:5e:ec:2b:8e:e6:76:30:42:09:61:
                    56:5f:97:e9:1b:17:fd:03:22:95:69:20:9a:20:61:
                    07:42:7f:1e:c2:7e:78:83:00:e3:57:0e:ff:6e:22:
                    82:e2:0d:d2:83:cb:cb:11:84:6e:ba:c5:b3:58:44:
                    c4:5c:bd:ad:60:79:da:07:5a:ca:98:e7:f7:dd:22:
                    1a:32:b9:8e:b8:77:84:c4:ad:a4:74:e6:f1:3b:97:
                    04:54:68:9c:e7:97:c2:97:24:b6:61:e1:66:16:e9:
                    bd:8b:61:d4:6e:11:a0:44:e4:a1:78:bc:07:7d:83:
                    d8:c6:0d:15:6e:55:03:3a:23:49:21:2f:67:72:70:
                    c5:68:50:5a:d1:7b:5b:15:56:2b:4c:78:3e:86:da:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.100.0/22
                IPv6:
                  2a0d:4580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204736

    Signature Algorithm: sha256WithRSAEncryption
         72:7d:2c:be:93:96:fb:16:a3:2a:cd:a7:52:6e:6c:02:d4:d3:
         db:b7:69:e4:db:98:10:de:3b:76:e4:5f:4b:00:b4:c0:c5:78:
         85:fa:bd:8e:ce:9e:8a:86:b5:dc:14:80:89:f1:0f:dd:a4:75:
         51:c4:3b:60:fe:51:42:8c:01:71:9d:f5:62:1a:17:20:39:91:
         ad:3a:f6:9b:40:26:b0:9e:b5:6e:44:9a:e9:9a:28:a9:b2:ba:
         29:9c:87:dd:ae:07:c3:35:72:eb:41:a7:c4:03:fd:3b:43:63:
         d8:f1:d6:2a:cc:00:43:15:1a:0e:b1:4a:26:32:1e:e4:54:ed:
         0b:5f:0e:18:2d:be:21:34:d0:2b:17:9d:f5:d7:74:37:bf:59:
         75:f4:d8:12:4b:8e:34:0d:fa:3e:d2:01:6a:a5:0a:60:0d:1c:
         9b:24:9b:31:59:06:29:fb:96:89:c2:0c:dd:5b:36:51:2a:1c:
         16:17:7a:da:57:62:7e:7c:20:e9:5b:ba:dc:96:09:09:83:06:
         6e:43:66:1d:61:52:19:fb:e2:46:e2:11:4d:19:31:f4:1c:41:
         ab:b4:a8:2c:43:47:d6:43:64:65:ba:d5:21:2d:bb:43:1c:bc:
         c3:cb:a5:5b:79:83:97:7c:9d:63:a8:0e:b5:54:3e:c7:f7:4b:
         5b:10:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----