Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
File:                     GR4nsp9lok2flCFXFc02cYJanq4.cer (raw, json)
Hash identifier:          plO97gVrsO6o14vo62mjEU0s3ljPBLQUxSW8GbOqPBk=
Subject key identifier:   19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F368D238D33617144EE091EBB8F9F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208917
                          IP: 185.102.24.0/22
                          IP: 2a05:3200::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:36:8d:23:8d:33:61:71:44:ee:09:1e:bb:8f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:8b:03:3c:4d:c5:be:1f:bd:f8:12:d1:63:
                    fa:91:38:78:b9:c5:05:f9:a0:9c:01:d5:9e:d3:b8:
                    c9:44:be:88:26:33:be:1c:7c:8f:66:07:40:32:86:
                    8a:f8:a1:f7:63:0e:7b:4f:95:d3:a8:ec:60:94:37:
                    ac:bf:3c:a9:28:bc:c8:8a:cc:48:9f:bc:bb:70:71:
                    36:5d:a9:f8:a9:10:f0:3f:62:48:f7:a8:b3:ec:04:
                    b4:9f:92:94:9d:a0:e9:21:bb:5e:6e:a2:6d:6d:ce:
                    eb:c1:ac:64:56:47:61:a2:e9:5f:e5:f5:b2:88:21:
                    30:22:fc:b1:31:76:e3:de:26:f2:eb:f3:00:35:63:
                    86:e6:50:e1:4b:82:7d:51:61:6d:c5:b1:a2:2b:4e:
                    48:dd:05:c8:c8:a9:86:1b:48:8b:f8:22:94:f6:00:
                    e7:81:9c:d3:32:b0:6b:2e:65:9b:eb:a1:f6:ce:df:
                    c5:fd:94:f9:bf:9e:67:ab:80:63:19:2e:db:24:87:
                    8d:89:1a:a8:fa:4d:2a:62:60:27:db:ba:b2:58:77:
                    fd:19:51:b1:be:70:33:3b:23:32:a4:ec:6d:fb:db:
                    38:7c:d1:74:3f:12:8a:a0:53:3e:ea:96:ce:01:ed:
                    bb:64:e2:6a:05:e7:c6:71:3a:e5:82:d9:a9:68:bc:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.102.24.0/22
                IPv6:
                  2a05:3200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208917

    Signature Algorithm: sha256WithRSAEncryption
         05:fc:2c:00:2b:bd:57:43:1e:a9:7d:82:55:89:64:f7:a5:d3:
         c1:ed:b5:23:88:1b:81:4e:95:ca:68:a5:9c:96:c0:d7:bd:4e:
         7f:8d:34:4b:93:5d:58:cb:4c:74:4b:84:c8:86:b4:68:a8:01:
         27:cf:b0:d8:c7:ab:e2:f1:6e:e2:7e:61:76:bd:6d:b8:9e:bf:
         14:f0:22:25:02:d1:73:ea:b8:ee:56:bd:e7:11:aa:4a:ef:5d:
         22:67:42:7f:bf:27:92:3a:76:d1:1c:d1:77:1f:45:7a:07:a9:
         71:30:98:f1:18:85:27:92:36:b7:78:82:54:b1:18:6d:28:1a:
         6d:c0:f0:f9:fb:9f:58:ff:cc:46:6f:c5:8f:ed:04:2c:7a:bc:
         86:49:4d:ad:ca:e2:79:c8:6b:4b:19:1c:22:01:42:d3:9a:ec:
         60:27:6e:f1:13:f2:48:5a:55:b3:27:ac:78:3d:63:24:97:c4:
         3a:e3:0a:17:15:1f:35:3f:ee:7e:53:99:5d:b5:66:fb:e8:13:
         f0:1b:63:61:9c:2a:30:e4:32:73:62:d0:8f:a3:bf:29:0c:17:
         60:08:d6:81:b9:e7:0f:d0:eb:bc:1c:ca:ff:a6:56:5d:5c:c6:
         55:c0:f8:ee:dc:a7:4e:11:d9:d3:3b:9e:8c:5e:76:92:8d:66:
         4d:59:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----