Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
File:                     G3573I4VumsubQlVJHa7G1WxWcM.cer (raw, json)
Hash identifier:          jlsJJeVfdhlKiIjXK+4L8xR6BnCz8nikPVTnCOjQGKg=
Subject key identifier:   1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA936A225A24EF429E4D56480DB62D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210863
                          IP: 37.16.72.0/24
                          IP: 2a11:5d00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:93:6a:22:5a:24:ef:42:9e:4d:56:48:0d:b6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:ea:79:bd:85:35:ef:42:20:6c:79:64:cd:
                    5a:e3:6f:0c:d6:6d:df:96:18:bf:7c:e7:01:e4:c6:
                    7d:e6:be:da:7b:1f:1a:05:36:47:9c:a4:18:f1:76:
                    a8:d4:41:50:64:05:72:57:89:67:4e:ef:5f:7a:91:
                    1e:41:51:6c:de:c0:46:12:02:39:a6:ca:0b:f3:28:
                    5c:54:d6:a5:7d:60:28:5b:df:cb:ab:c0:75:4d:f2:
                    b6:cd:69:bd:98:b9:05:5b:bf:a1:f2:13:53:65:8f:
                    48:1c:bf:33:ca:b0:0b:b6:f2:e2:80:b6:ec:ac:11:
                    d4:a8:7d:f9:40:a8:31:ec:05:a4:64:d7:55:80:bb:
                    d9:d9:ff:50:68:13:98:4c:1b:6f:27:85:f1:4f:7f:
                    76:c6:3e:69:01:f9:c8:e3:78:a8:b7:48:99:c3:a9:
                    a7:aa:88:6c:70:0e:dd:35:2e:a2:8a:94:0c:5c:22:
                    aa:af:68:36:a6:58:e4:8b:82:eb:c6:47:32:97:4a:
                    ad:b2:31:92:14:6e:52:84:ff:72:81:cf:34:75:fd:
                    b9:03:76:ab:3f:77:61:be:5c:09:f6:61:55:14:06:
                    b6:8a:8d:bd:cb:65:39:e2:e1:7d:e8:15:36:e4:e8:
                    af:03:06:cb:93:89:7a:cc:4c:ed:f6:7a:36:cb:df:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.16.72.0/24
                IPv6:
                  2a11:5d00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210863

    Signature Algorithm: sha256WithRSAEncryption
         7d:88:2a:92:16:8e:9e:15:77:ed:2a:4b:3a:34:db:2e:d0:6a:
         e6:11:b2:a3:df:4d:e8:ac:93:f3:52:40:15:4b:de:65:05:2b:
         29:20:d7:d6:82:b7:fa:f0:9a:05:68:f4:d9:2b:1f:bd:c6:c5:
         8e:d4:36:e8:02:9e:2f:7e:1a:08:3a:49:8d:b7:ca:7f:d4:80:
         5d:fe:89:9f:55:16:fc:94:2f:3f:74:6b:c3:67:c0:18:97:ae:
         2a:aa:4d:32:d7:1a:a2:1d:a6:2c:9f:3c:63:eb:98:28:0b:06:
         72:27:b3:77:fa:13:66:fd:59:bf:1b:9a:08:85:7d:88:39:5d:
         31:94:23:2b:ae:88:b3:a8:e8:88:33:3b:38:3b:b1:a7:f6:42:
         4d:25:05:49:c8:10:9f:2b:4d:eb:96:fc:3b:e9:0b:79:ff:92:
         3d:8b:89:6d:da:42:09:5e:d0:e8:fe:fd:66:27:33:ec:93:85:
         f7:ad:26:33:bb:2f:e4:b3:1c:b9:cf:ac:86:9c:47:46:9c:e6:
         9c:09:e3:7f:7d:40:f8:19:0e:d2:37:bb:ac:b4:59:e3:84:b3:
         4a:3d:b4:f0:aa:a1:ba:31:06:1e:25:c5:95:f8:2e:8f:77:a8:
         8f:50:fd:30:ed:e6:68:5d:58:53:50:8a:be:87:02:e2:35:e5:
         94:3b:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----