Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
File:                     KUJPgsfIL8VJlTLlpmUadPYpxao.cer (raw, json)
Hash identifier:          eZInj3MMP+juzO/wxmbGEVb7KQIYnxWdMX330SwWTBs=
Subject key identifier:   29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274776C1946B6761BBC78555D65D95BE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58261
                          IP: 185.218.141.0/24
                          IP: 2a13:66c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:76:c1:94:6b:67:61:bb:c7:85:55:d6:5d:95:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:e9:0b:d1:36:09:7f:86:a5:ab:30:29:89:
                    74:48:31:39:58:28:84:cd:d2:38:1e:65:8f:18:73:
                    b9:8e:f9:ce:92:19:d7:7d:62:e7:16:3b:15:5c:6e:
                    db:09:65:89:9b:e4:92:29:82:0d:ef:d3:d3:fa:5e:
                    9a:e9:a2:1a:b6:13:98:1e:3e:89:05:33:b6:8c:12:
                    20:8d:57:dd:33:c6:30:5a:d9:69:b0:69:90:c2:07:
                    10:f6:fd:8f:3a:b6:a9:cf:fd:ee:23:cb:ea:82:16:
                    42:ba:47:c0:98:e9:67:fc:fb:4b:db:ee:c1:b3:8f:
                    39:04:6e:50:52:a9:3a:b6:b9:0e:1a:25:b5:5c:61:
                    24:00:33:5e:68:88:39:7d:64:11:8a:72:85:1d:ab:
                    e9:73:7f:4f:b4:2c:59:a6:dd:0d:80:7f:f3:fc:b4:
                    53:4a:ce:3c:08:4a:0a:e4:12:92:2a:48:bd:48:7a:
                    ea:66:12:9d:b4:fd:8d:af:cd:13:0a:09:7e:6c:66:
                    fb:9f:3b:96:f9:cf:c6:13:a8:52:ea:fe:6f:d3:95:
                    1f:26:1f:d9:86:6c:aa:11:f1:ef:e5:78:33:66:25:
                    11:38:bf:eb:84:3c:15:c9:0d:32:0b:36:bb:46:10:
                    39:76:5c:71:0a:51:39:e6:0f:70:fa:84:25:99:e9:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.141.0/24
                IPv6:
                  2a13:66c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58261

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:99:c9:c4:88:b6:62:d2:72:a2:b9:9f:34:5a:b4:9d:04:
         13:96:8f:25:59:8e:c8:ba:f4:2f:22:2c:73:a2:d4:92:c1:32:
         a7:0f:38:b4:4e:3a:36:e2:d6:58:bb:a6:43:ed:8f:ee:d6:1b:
         49:fc:ba:4a:e8:07:76:52:b1:4e:f4:2c:a1:aa:d9:69:ff:a2:
         b5:70:7b:69:c0:18:ca:8f:66:9a:9a:14:1e:70:a6:b3:6a:71:
         b6:65:46:7e:b4:1f:40:23:30:28:02:3e:b2:e6:af:46:d1:1c:
         82:c7:8d:d2:f0:8e:29:85:44:df:3f:76:77:d8:30:4b:d5:74:
         f6:ef:5d:16:a6:5c:b5:01:23:c6:a6:30:39:c1:88:c0:64:da:
         0d:5d:5d:f4:1a:fb:ef:db:6c:74:fe:4f:4b:2a:99:94:38:d8:
         63:98:bc:81:ab:ca:f0:10:1f:33:c7:fd:25:0c:2a:9d:b5:4f:
         e1:1a:97:83:f7:42:00:9e:1e:7c:4e:dc:5b:4e:6c:4c:7a:0a:
         63:10:c0:9f:7c:1c:f3:75:34:d9:2a:75:a0:86:b2:98:ce:ee:
         6a:2d:bc:b8:fa:74:39:2c:8c:3f:9f:90:58:02:b8:81:6e:c3:
         32:64:25:56:da:8d:ca:c2:c4:04:59:79:43:df:cb:de:7e:69:
         11:3e:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----