Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
File:                     LVXE3X8hL8SJa9DJcYYMBbMO640.cer (raw, json)
Hash identifier:          wAmBNf7JggZOXrADU9DiXQGaL4T9+qD2/d7PF3Orn3c=
Subject key identifier:   2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3F2774B2001EDACC05EB3D7289E27
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211127
                          IP: 45.142.13.0/24
                          IP: 2a12:ec00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:f2:77:4b:20:01:ed:ac:c0:5e:b3:d7:28:9e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:d7:7b:ee:58:8c:3e:c4:ce:ac:34:01:27:
                    a0:70:91:29:32:01:fc:dd:2e:01:05:92:5c:74:92:
                    56:30:ef:6a:7b:63:83:f4:db:19:c5:a8:5d:9b:6f:
                    a3:f5:1b:12:23:4f:a2:27:c1:af:e2:05:b5:4e:a6:
                    a5:59:d1:fc:ad:7e:07:19:81:e7:c2:de:ba:d3:09:
                    d0:9f:b9:eb:d0:7d:f1:4f:b2:c5:32:b6:18:bf:8d:
                    4d:3b:a7:43:41:81:db:9e:1f:8b:31:b9:4e:90:25:
                    57:83:00:4d:ec:53:9f:5e:e4:7c:a1:d4:3a:c3:e9:
                    f7:39:1b:a8:f3:e1:b8:da:7c:6a:1a:ce:e1:54:a5:
                    2f:84:2f:4e:5e:08:e7:f0:e7:78:90:02:44:b7:fc:
                    6e:6b:23:4b:69:3c:85:08:22:bd:5e:f3:07:48:80:
                    a7:89:5c:66:d3:04:cc:2b:d1:fc:62:99:d8:95:dc:
                    e2:85:6e:aa:f9:0a:6c:c4:e0:59:ed:2d:93:dd:98:
                    ca:d9:60:4a:38:65:a4:53:0d:86:37:8d:02:90:63:
                    b4:da:b8:b1:ff:a0:0e:38:32:70:08:85:cd:bc:16:
                    3b:27:c0:77:06:b8:d1:50:cc:6a:09:1a:3d:cb:50:
                    ef:99:f8:95:82:11:9d:3e:f7:0f:9d:f0:33:3a:77:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.13.0/24
                IPv6:
                  2a12:ec00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211127

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:85:e2:93:de:79:56:94:43:b6:6e:0f:a0:70:59:db:d5:
         26:c0:31:ae:10:e1:53:8d:a6:c3:09:9f:e8:3f:cf:15:af:0f:
         81:a8:52:76:a4:d8:44:6f:6a:c0:cd:48:99:69:7e:5d:bc:1e:
         9d:e4:bc:ba:d6:6a:63:fd:58:2a:87:ab:e5:11:fe:5e:77:cb:
         73:c6:9a:78:9d:6d:72:96:13:38:a8:21:5c:42:af:d5:4f:c4:
         09:46:d8:2d:30:cc:fb:97:07:1c:13:ce:60:c4:88:64:a2:7f:
         1d:38:31:7f:05:e8:e4:e4:aa:d2:82:a7:67:31:3b:00:90:ef:
         78:ee:30:45:b7:c3:4a:23:67:cc:c9:e6:8a:e1:1b:f0:5e:1a:
         b0:30:7e:a6:3f:15:ed:07:f5:0d:b7:2d:2a:1f:59:d2:f1:6b:
         de:45:30:73:76:63:4d:83:28:92:28:a4:16:c7:5a:20:99:d0:
         37:f4:f0:f8:55:4e:30:d8:7a:31:fc:1f:e6:54:74:a6:f2:c5:
         78:57:e2:fb:6f:2b:6f:44:97:2e:f7:f0:16:dd:d1:22:aa:67:
         01:26:7f:3f:3f:83:91:a4:d8:ff:e7:37:4b:6b:23:1f:56:11:
         9c:88:b1:fa:b8:48:29:ae:05:02:e4:f0:ac:db:11:7a:18:ca:
         15:ae:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----