Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
File:                     HxINfknJ878xPZZTGt-n6q6AV2E.cer (raw, json)
Hash identifier:          GVFiVRMUe1tgccdRTsrxcb3Z7FErcQgH66Xoqn8sygI=
Subject key identifier:   1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143CDDBA658067ABFF254483F0853DD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209842
                          IP: 94.154.144.0/22
                          IP: 2a09:c500::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:cd:db:a6:58:06:7a:bf:f2:54:48:3f:08:53:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:70:48:a3:1e:86:83:27:12:3f:82:07:4e:
                    90:d8:a9:dc:c9:24:e3:49:3b:b2:0d:cf:d2:16:32:
                    08:0e:c0:84:83:ba:4e:36:b3:8e:45:78:6e:db:d6:
                    4f:a4:95:1b:b8:a5:43:2d:e0:1f:da:5e:32:75:9f:
                    ad:fb:19:67:93:5c:a9:9f:43:61:d5:3f:1b:fd:4a:
                    c6:f2:f8:ad:0f:ec:64:79:58:53:a1:b4:26:c5:85:
                    2f:45:4e:e6:f9:5a:ab:ab:f3:64:4c:73:5c:d8:d4:
                    cb:cc:a9:5b:43:43:67:7a:6b:9d:cb:5d:ec:b9:20:
                    88:91:72:1a:93:cc:5a:1e:36:15:0f:6a:7f:69:ca:
                    d6:66:8a:1f:a0:5c:2b:8e:94:bc:3a:ed:cf:cd:74:
                    b9:69:be:72:9f:d9:29:e8:e8:fd:91:32:b5:0b:3c:
                    8e:99:ab:04:e8:3e:86:7f:25:56:1a:7e:f5:5b:d6:
                    45:29:72:f9:57:83:5d:bf:4c:b5:50:25:c8:e3:85:
                    cf:e5:69:12:9f:a4:1a:2f:b3:7a:85:64:0f:e8:04:
                    18:7c:0b:36:a2:ef:a6:01:a2:13:b7:17:03:80:66:
                    7e:c2:4e:43:d0:cb:0f:da:96:69:c3:4f:7b:24:69:
                    33:49:7a:03:93:4f:d9:5a:aa:a7:6a:85:d6:a4:8e:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.144.0/22
                IPv6:
                  2a09:c500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209842

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:26:9c:b8:af:57:09:c5:92:1a:3f:d7:88:75:29:ed:8e:
         d9:ad:fd:8f:96:2e:f1:c6:21:60:cd:1d:76:96:cf:9d:ad:de:
         49:18:13:12:20:e9:fa:d5:f8:aa:cb:fc:cc:4f:0c:8b:e0:30:
         6a:23:98:82:16:09:fd:88:26:74:b7:b9:dc:a8:7f:59:69:8e:
         d1:38:e4:16:8a:ec:8e:d8:5d:a2:d1:c2:a3:f9:f0:05:f2:22:
         fa:2c:73:af:76:b8:bd:dc:7d:5e:6e:0f:e1:23:e5:75:ca:f8:
         d7:45:fb:9b:46:c3:03:77:1a:48:52:e3:3d:b2:54:ad:32:f9:
         6e:38:96:d3:fa:4a:c8:d2:6e:ed:bf:8e:ca:b2:dc:1a:d8:5c:
         85:4e:70:ac:ab:85:0b:69:6c:9f:8c:ea:6f:51:09:0e:79:5e:
         34:b2:85:11:60:a0:5b:c6:41:59:d7:b5:44:97:2e:b2:3c:ab:
         2e:0c:bd:ff:a4:fe:8a:52:db:86:64:66:f1:23:b5:aa:78:8a:
         ee:52:4f:6a:83:2b:3a:a7:cc:d4:5d:1a:4a:2e:81:c0:be:c4:
         06:c8:8e:13:f4:b9:b2:cf:a0:66:a0:04:85:b1:d3:30:28:40:
         8d:e6:55:51:5a:96:e6:4e:33:c9:e6:be:25:94:c7:a9:49:2f:
         fb:36:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----