Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
File:                     Iavg4GkA17lgdsALtQ1PncA5L1k.cer (raw, json)
Hash identifier:          E63aIgiCzpm2m6BAZc0DvqxAX90X2aAf8i6iuT2uLjU=
Subject key identifier:   21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5E9C41291A719A843B62552C7D37F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39872
                          IP: 195.170.177.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:e9:c4:12:91:a7:19:a8:43:b6:25:52:c7:d3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:34:0f:0c:47:11:3c:55:76:1e:18:3f:41:
                    2b:88:de:ef:ca:ef:2d:2d:96:32:2e:c5:1b:46:84:
                    4e:0a:a4:65:dd:b9:dd:24:fa:98:32:93:d3:c9:8b:
                    15:87:a8:d8:38:09:43:67:3f:8d:4d:b7:fc:68:29:
                    90:96:6c:63:e6:ec:c0:16:c2:29:cd:0a:b3:ea:f5:
                    cf:ad:9b:81:6a:51:9f:87:ce:63:44:93:2b:da:a0:
                    bf:04:e2:2e:8c:6b:bc:e2:c8:66:33:0b:1e:52:74:
                    ee:00:d2:d7:aa:a0:4c:33:39:39:fc:c7:a4:14:66:
                    43:6a:d9:02:4d:1f:25:5d:81:8f:ab:d7:5f:af:6d:
                    2a:59:03:68:1b:d1:0c:06:ef:b1:e9:61:d3:3a:78:
                    a3:c5:b7:f2:35:91:a4:f9:5d:e2:e2:c6:12:34:1a:
                    f1:6d:a7:75:37:62:af:79:22:25:98:93:0e:72:66:
                    54:f2:f3:29:20:df:fb:42:44:44:0d:ee:da:53:81:
                    ea:08:51:b6:71:19:0c:73:33:7d:22:6d:3c:03:d2:
                    62:80:12:e7:d7:32:ce:72:d2:6a:4e:ed:de:fe:9d:
                    1a:16:50:8f:b0:de:33:23:71:67:98:e9:7a:31:ad:
                    ee:94:80:5c:b4:91:3d:37:0c:17:e2:36:cf:0f:b2:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.170.177.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39872

    Signature Algorithm: sha256WithRSAEncryption
         50:6e:ec:ec:0b:6a:a7:f5:26:fa:2a:14:64:dd:5a:3a:22:3a:
         7a:69:b7:93:c9:10:0d:00:d8:8d:8b:bf:14:f4:67:1b:f3:01:
         83:fa:f9:1c:d7:8e:0f:d5:c2:ec:e4:07:3d:d2:6a:00:df:67:
         8e:4b:8f:94:43:4f:4b:91:d5:d6:ef:f5:b7:1f:f4:e4:e8:65:
         95:36:8f:d7:f0:67:27:0f:24:a4:32:4d:c4:d4:53:78:b8:37:
         f6:42:9b:37:02:76:e0:6e:0e:64:3c:f0:6f:d3:13:33:77:a0:
         d3:68:50:20:f8:f7:b3:63:41:63:10:4c:7f:a9:ea:81:db:c1:
         c8:e3:ed:09:a2:d6:d5:e0:ae:44:f3:b8:e1:f7:d8:27:d6:1e:
         76:1e:dd:5f:5c:f5:c8:ca:81:1b:40:7f:f8:5b:f0:b8:11:22:
         58:c3:ae:2b:bf:7c:46:41:eb:b0:50:53:a8:d5:1c:e7:fb:8b:
         7e:d9:79:e6:b9:c1:82:c6:16:f8:25:93:1c:ca:1e:ff:10:fe:
         db:76:4c:3e:25:e7:7b:2c:b0:5d:ba:a3:60:54:19:a1:02:26:
         a2:96:a3:af:fd:8b:34:34:1f:0a:41:05:9e:0a:8d:96:ce:61:
         50:fa:02:6f:02:f1:64:2e:3e:f6:01:e5:28:c4:87:90:2d:86:
         10:95:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----