Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.cer (raw, json)
Hash identifier:          2k8yDv31t9fpeCwW4ovkVjw9vrqcIZI+ZvmvwALyxtY=
Subject key identifier:   27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B20866CE15C2FF93D4F4F6284ADE1E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209026
                          IP: 185.253.236.0/22
                          IP: 2a0c:42c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:08:66:ce:15:c2:ff:93:d4:f4:f6:28:4a:de:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:30:cf:3d:0a:6e:33:60:3f:e9:c0:8f:83:
                    61:6a:7e:e3:99:60:54:74:1b:e0:a3:cb:31:73:d1:
                    61:8f:bb:37:ac:fa:2b:3d:fc:3a:81:eb:af:9c:34:
                    89:70:07:48:70:4f:2c:95:47:29:12:82:ee:03:10:
                    aa:c6:51:29:6c:de:2b:48:b9:b6:9d:b6:c7:d6:ac:
                    a0:00:4d:ff:6b:1f:b5:2d:6b:1b:b0:4a:41:a1:77:
                    d8:de:3f:2d:35:39:57:75:44:bf:67:cf:fc:c2:f7:
                    05:3d:57:a1:ac:ca:ba:66:85:44:82:9c:f6:09:4b:
                    6d:bd:f6:ce:47:75:39:f5:c1:05:69:1c:7c:4f:5e:
                    ed:e7:2d:ba:c7:e1:21:91:ba:9a:01:b1:b4:bb:1b:
                    e5:15:dd:10:aa:14:7d:2d:5d:84:68:d8:88:d7:8c:
                    c6:df:f1:52:2d:ae:5a:ab:6a:27:fa:c8:c9:41:3b:
                    dd:3c:5a:c4:be:fe:4e:66:bf:e4:c7:cf:e4:60:63:
                    60:02:0f:ab:40:51:34:37:78:68:6e:e4:e5:97:44:
                    17:d8:6c:48:39:f5:ab:85:9d:d7:ca:35:dc:68:16:
                    eb:80:62:cf:79:d3:69:9e:71:50:fe:9d:a3:82:f0:
                    9d:c1:41:77:77:2e:d2:3a:c2:e9:3c:b8:cb:89:83:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.236.0/22
                IPv6:
                  2a0c:42c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209026

    Signature Algorithm: sha256WithRSAEncryption
         b0:0f:2a:3e:f8:f9:02:13:7b:3c:30:65:d3:64:9b:9a:32:54:
         f5:3d:33:fd:d6:f0:14:db:c2:e2:78:6e:d7:8a:4f:ca:9e:c3:
         5e:7e:ff:27:8a:bb:94:35:d5:21:49:a9:7e:16:5e:9d:7b:da:
         ee:29:89:b8:ff:f9:88:20:1b:5f:b9:01:af:a3:05:06:e8:f5:
         33:a1:52:7f:41:a0:71:47:a4:7d:0e:93:af:cf:00:f4:8f:08:
         5b:d9:1a:a0:e5:dc:98:83:f8:5d:95:5e:12:08:ad:2a:48:e1:
         ae:b7:36:76:d3:cd:59:16:60:4a:95:ab:05:38:1c:cc:e5:f5:
         68:0a:42:f0:f9:74:60:6e:05:9f:df:fa:a7:0a:bc:0b:54:48:
         a4:d8:83:57:5c:f3:ba:ac:48:e3:31:a5:73:95:88:8d:e1:29:
         ab:0f:40:05:64:bb:61:16:3c:ff:d1:87:55:8e:64:b2:dd:f7:
         a8:17:2f:66:fc:c8:af:3a:a1:b6:df:30:e5:f4:07:45:26:c5:
         25:3a:54:42:d6:ec:fd:62:77:7e:23:b5:79:12:aa:89:ea:4c:
         13:a2:89:74:97:6f:68:e1:ee:f7:54:1f:10:f5:8e:d2:85:5c:
         9d:9c:2f:a8:00:1c:8c:12:a8:7b:da:d0:60:d6:2e:61:9d:25:
         df:9c:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----