Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
File:                     G_A9uL9mABk75I-xDm4xa4tfiOM.cer (raw, json)
Hash identifier:          gRZ+B6PEfCpJh8OChcMgICRGorOzEdim9MRd+LoGozs=
Subject key identifier:   1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7178A7C24200FFB1AE522D2F09125
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204434
                          IP: 185.248.224.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:17:8a:7c:24:20:0f:fb:1a:e5:22:d2:f0:91:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:12:0f:e6:28:17:7e:d0:f5:5e:70:03:31:86:
                    f6:52:9c:2a:6e:ba:f7:76:26:d8:f4:08:8d:27:1f:
                    48:b6:49:85:9c:1d:91:76:f9:1f:e5:68:aa:54:29:
                    be:bb:1f:72:f2:7b:71:09:5e:ee:67:28:59:74:49:
                    36:2c:cc:33:0e:51:b2:bf:79:9c:79:3e:49:e3:57:
                    ca:0f:5d:5d:ce:f5:61:7c:5d:29:72:d7:7d:66:4f:
                    c5:57:75:e7:81:61:95:b7:17:42:9b:b9:d1:fc:83:
                    e1:f8:9b:ed:ca:c5:7b:2f:7c:85:4b:24:a8:19:6d:
                    e5:5b:d1:4b:53:ef:7b:c7:c7:09:13:b2:b8:71:f3:
                    e6:c5:9e:d2:f8:c0:16:f6:b2:a3:37:2d:b2:dd:33:
                    a6:61:99:ba:56:95:0c:1b:22:30:79:73:b1:f6:1a:
                    7c:fd:76:c9:05:e0:53:05:fb:43:b3:41:32:7c:b0:
                    dd:b6:ec:6b:7e:be:5c:47:75:47:83:87:45:a3:32:
                    c6:00:bf:7a:70:e3:32:f2:a4:6b:2f:18:59:4a:96:
                    19:3c:57:23:18:5c:0e:6c:f8:d9:c0:29:67:97:25:
                    97:b5:3b:0c:dc:22:4c:4e:54:ec:e4:24:c0:b7:41:
                    c3:27:71:71:bd:f8:7e:a7:26:53:0a:41:dc:97:8c:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.224.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204434

    Signature Algorithm: sha256WithRSAEncryption
         4a:f3:1a:a4:0e:0e:a9:de:4d:1b:dc:7d:3e:6b:58:53:69:fe:
         b8:7f:66:79:f0:1e:6e:0e:e8:5f:7b:c8:a4:87:0c:46:8c:58:
         2c:38:1b:b3:80:32:f9:12:b4:99:16:80:42:98:42:96:06:04:
         48:ad:72:70:34:fd:13:bb:d1:bc:f0:53:8a:8f:b5:18:0d:03:
         a5:ca:b3:6e:a6:e5:91:78:a6:0e:8f:9b:68:93:d0:87:e3:46:
         56:43:c2:a7:64:d6:1f:b8:ea:95:eb:4c:52:ec:2f:bf:6a:08:
         d1:ab:fe:81:36:67:f5:3f:f0:0a:48:e5:ac:0b:b8:53:8c:f0:
         16:75:17:41:cf:b5:4c:f7:5d:98:fc:c0:92:a8:49:d8:b5:6f:
         9a:9a:a4:10:b6:7a:70:e6:c4:e4:48:7b:23:20:2d:d8:ab:f0:
         41:49:f4:9e:fc:1a:6c:ff:c0:0f:b4:95:b6:dc:66:ef:e3:68:
         8a:1d:f1:8b:f3:a3:64:cf:e4:a3:f8:89:56:d3:65:e0:5f:b7:
         df:3f:4d:d0:21:26:da:14:a4:d3:f5:49:d1:65:cb:f9:8c:77:
         d7:75:d1:09:d3:22:40:08:3b:3d:7d:84:b0:73:1e:db:8c:c9:
         49:6f:00:a7:e1:ad:53:f4:7b:fa:ea:b7:5a:51:b7:13:b0:de:
         7a:c6:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----