Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hzspn37Z9UTXv5ALWcz4iadk30g.cer
File:                     Hzspn37Z9UTXv5ALWcz4iadk30g.cer (raw, json)
Hash identifier:          SEflo4W3pQrBhdaAi4+r0InF6G50w7PsPSGwDQvPWXY=
Subject key identifier:   1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDC8ADCED4A7F8D31511CDCCDBF6C1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201524
                          IP: 185.71.180.0/22
                          IP: 2a03:3aa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:c8:ad:ce:d4:a7:f8:d3:15:11:cd:cc:db:f6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f3b299f7ed9f544d7bf900b59ccf889a764df48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:46:d7:7b:5d:0d:ef:48:24:97:5f:62:58:
                    c7:2f:ec:1c:71:b0:85:a4:14:01:9e:a0:9d:f1:49:
                    d3:e2:1a:f7:d4:a2:ab:50:ec:29:70:ed:18:27:10:
                    34:9e:a6:cf:c2:d8:59:93:a9:ed:67:44:9d:0b:88:
                    db:f7:f8:c9:50:f5:c6:e1:92:03:06:0d:c3:9c:3d:
                    48:5e:df:0b:94:f1:0f:32:9a:5f:db:b8:11:91:3d:
                    74:24:11:97:17:66:0a:e1:a8:64:ff:cf:e4:cc:93:
                    a8:fd:fd:8c:9a:df:de:d2:fb:15:88:06:ef:a5:0c:
                    a5:79:98:2c:d4:42:4b:c4:04:2e:51:59:83:31:16:
                    0b:7a:26:31:87:aa:c3:cf:6b:f3:2a:0f:0a:61:23:
                    d3:e8:e4:60:81:17:72:3a:7f:34:92:74:a6:e5:d0:
                    55:6e:11:1f:9e:a1:08:a6:b8:79:fe:6d:39:4a:b2:
                    4c:30:90:14:60:8c:3b:99:b8:0e:d0:ee:92:d6:a9:
                    cd:1d:4a:1d:db:21:10:19:c0:5f:f1:fa:90:77:0a:
                    54:82:cd:3b:68:c6:6d:77:12:d1:1a:0a:4a:a6:c6:
                    82:74:66:35:53:61:82:5f:42:92:a6:41:4f:24:51:
                    cb:3b:8c:eb:6a:7f:a4:56:00:07:ef:73:b7:3c:92:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.71.180.0/22
                IPv6:
                  2a03:3aa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201524

    Signature Algorithm: sha256WithRSAEncryption
         2f:09:8a:2d:82:78:fa:bd:7f:69:62:4c:ed:8d:7e:8e:85:ca:
         2f:cd:76:8f:44:7b:44:4b:ef:61:23:0d:f2:8b:b6:44:f4:a3:
         29:61:0c:10:d2:e7:fb:b0:31:7c:02:da:8b:42:da:e7:b6:74:
         c0:54:93:1f:38:9b:50:ab:1f:2b:fc:48:9f:38:b9:9c:b2:a7:
         5b:19:d5:d4:ce:0d:c2:e4:57:4c:de:e4:21:a9:6e:20:5e:19:
         ac:15:96:f8:8a:b1:7a:52:7c:1b:90:fb:55:fa:40:c7:ed:91:
         a8:8d:6d:32:6d:aa:2d:f1:12:ec:2c:3c:a2:7e:09:7d:61:51:
         9b:b0:e4:b7:03:67:0f:68:68:d5:dd:b0:ae:08:6a:38:5d:4c:
         53:c3:0c:bd:d8:65:df:05:f2:76:91:7f:30:79:5c:6b:d0:ca:
         31:4e:0c:27:77:c5:62:21:39:6d:72:1e:8f:13:1c:e0:12:01:
         32:cb:b5:05:af:c3:fa:61:ab:00:0e:5c:47:29:2e:54:36:7d:
         fd:50:97:87:a8:1f:37:4b:8b:c4:d4:1d:f6:a5:c6:15:87:19:
         ee:a3:9f:b8:2e:49:21:59:f7:cf:d8:1f:96:ea:39:8d:66:c3:
         fa:14:bf:91:ba:6a:1b:f2:3c:71:08:6c:d5:57:41:14:21:89:
         81:bc:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----