Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
File:                     G7yEG3eaK7LCio2u4rLRDVp8NNU.cer (raw, json)
Hash identifier:          UKGL53nM2wic+6fLllu0dUUXJIP9rL/XfeOBZKnBGWo=
Subject key identifier:   1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FCD7D7357F4DB676AF02B32D755CF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56813
                          IP: 91.237.88.0/23
                          IP: 2001:67c:299c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:cd:7d:73:57:f4:db:67:6a:f0:2b:32:d7:55:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:0b:08:1a:6e:39:a0:c8:3a:61:22:1d:2f:
                    cb:15:71:2b:dc:02:c8:98:ea:25:cf:c7:bb:32:3d:
                    1f:99:1c:70:de:16:80:fc:74:13:1e:3f:22:5a:be:
                    71:52:87:d8:65:8c:70:9d:f1:9c:b7:d5:37:20:c6:
                    44:d8:c2:06:21:14:e1:88:93:6f:61:3d:b6:50:90:
                    ac:65:3a:7f:ed:f2:09:de:02:61:b3:29:cb:9d:97:
                    21:f5:91:e9:e2:4c:2d:da:f0:b2:fb:a7:78:32:ba:
                    ca:1f:fa:33:a3:60:62:6a:bf:97:92:9e:ca:20:e2:
                    29:4f:c1:ec:7f:78:0b:0d:8b:70:d4:0d:6f:3c:db:
                    58:9a:97:8a:6a:41:82:fd:c5:62:f4:67:1f:9c:cb:
                    8d:b7:38:48:1f:0e:a3:fa:9d:e4:79:47:33:80:b0:
                    75:f6:8f:33:cf:a0:86:b8:41:29:4c:5e:d0:ce:8e:
                    32:5e:a5:ff:51:fd:1c:b9:4f:7d:0a:44:a3:84:9d:
                    ee:ae:ec:e0:e4:c7:80:fc:7c:d8:99:f1:df:b6:35:
                    36:8f:85:b6:80:72:9b:e9:15:70:57:5f:e6:fa:cd:
                    77:71:0b:75:64:76:5c:26:b0:93:05:a6:51:67:19:
                    a9:c1:e2:57:3b:6b:ea:6f:25:aa:85:f2:c0:71:e5:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.88.0/23
                IPv6:
                  2001:67c:299c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56813

    Signature Algorithm: sha256WithRSAEncryption
         6f:42:f7:8f:14:50:3a:b7:35:55:c2:a0:d0:a3:af:96:9d:5d:
         2b:ff:f9:68:fa:7d:83:0f:94:f1:08:f4:20:c8:a0:a4:df:b6:
         99:97:88:4f:0b:a4:b7:07:99:34:97:4e:f5:51:6a:0e:88:df:
         96:09:b6:b3:f5:f1:68:67:f6:bc:0d:35:8d:27:85:07:1b:09:
         5d:7b:95:83:13:dd:86:5a:ad:bb:05:ef:84:b8:40:48:e8:85:
         6a:84:e5:ad:9d:e5:85:24:0d:6c:dc:45:2c:d1:91:b4:3b:3d:
         8a:67:63:e9:6a:a5:c8:b5:28:00:c7:dc:a5:84:e5:61:02:b1:
         e1:ae:31:83:11:40:55:7e:25:26:d0:cd:4e:b1:9c:2c:8f:eb:
         76:85:b7:aa:52:b8:04:ce:87:0b:3b:fd:87:86:1c:6b:0e:24:
         05:7f:6b:0a:be:6a:4f:9e:6b:ec:48:42:cf:51:d4:94:69:3d:
         8f:88:c8:d6:8c:0d:33:bc:3c:58:cc:ab:eb:ee:02:0c:aa:77:
         c8:87:8c:25:6a:46:f5:19:4c:36:06:b9:e3:17:30:37:81:be:
         97:22:47:45:91:6c:5a:90:24:c1:e5:a2:08:e1:33:72:a0:c5:
         8a:94:ad:9b:86:e7:be:cf:2d:46:5d:32:9d:e1:69:90:3f:90:
         87:36:21:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----