Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
File:                     MVGMe1S0QScIP2JtPhUY9EVM4FU.cer (raw, json)
Hash identifier:          4VMKo6ZoKKlQknpM/Ou7rwl8gnIfAx2FpIPBWsKUtaM=
Subject key identifier:   31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5E588601D3FBDF7EDAEAD2FCA42B8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201473
                          IP: 185.218.206.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:e5:88:60:1d:3f:bd:f7:ed:ae:ad:2f:ca:42:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=31518c7b54b44127083f626d3e1518f4454ce055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:4a:1d:e1:52:1e:a8:c4:dc:eb:32:b7:ec:
                    83:c9:52:5b:96:6e:c9:93:11:50:79:35:31:eb:9c:
                    bf:5c:69:8e:6e:74:da:55:6f:71:ff:6c:04:81:15:
                    8c:b7:79:04:f9:57:d9:92:b2:ad:4f:b3:8d:2f:83:
                    c6:a8:d8:00:65:7d:2a:cd:19:a0:e8:ef:b5:e2:ae:
                    14:bd:91:28:ef:24:fe:03:08:8c:89:26:34:98:a7:
                    50:8f:8e:d9:84:70:7d:f7:16:07:87:e9:87:e3:b5:
                    b8:ea:ec:73:5d:f5:23:6e:ce:43:36:8b:8c:cd:f6:
                    4a:3b:06:dc:85:67:08:6a:e4:2e:22:80:dd:9f:6e:
                    bd:2f:de:b2:4d:02:54:ec:34:72:b6:14:72:d2:8d:
                    6c:9f:e5:07:45:9c:58:a9:5e:00:58:90:26:8c:e7:
                    05:2d:89:17:1b:34:d5:da:61:dd:01:ba:4d:1d:0b:
                    64:83:71:fb:90:a9:f5:47:69:da:fa:56:4c:60:66:
                    78:f4:3d:42:e0:93:8b:eb:7a:94:7f:aa:21:2f:54:
                    49:98:bb:c6:d3:b1:c2:f1:d1:18:0b:79:a2:52:31:
                    55:90:8b:e3:59:d7:40:d4:80:3d:33:6b:74:c6:8c:
                    ea:97:c6:6d:af:cf:2f:3b:33:76:fc:61:dd:51:02:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.206.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201473

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:67:b1:25:fd:73:92:6a:59:c2:bd:a1:ca:69:62:ce:6d:
         37:1c:ba:f9:41:43:c9:3c:b6:6c:6b:2f:63:03:37:5c:fe:f7:
         15:37:6d:02:49:7a:ab:00:32:d8:1f:d1:66:88:b4:70:fe:21:
         bd:b9:00:37:26:e0:f1:21:bf:be:cd:d0:52:fb:46:07:9b:b7:
         6d:cb:7e:3b:79:fc:96:69:6b:11:f9:cd:87:7c:ca:1a:2a:8d:
         64:ba:68:1d:61:f3:36:02:3a:5c:91:4c:7a:0e:69:29:6f:86:
         51:45:f1:49:41:95:dd:83:06:f4:49:d5:67:28:f7:81:e4:f2:
         85:01:df:10:f2:c0:71:de:97:2e:2d:9d:f9:a0:21:c9:3e:4f:
         6d:03:92:58:9a:6e:9a:52:88:4d:bc:9f:b2:8e:f8:12:35:9a:
         43:4d:08:c8:3a:f8:de:06:74:e6:c7:20:3e:16:51:e0:2a:3e:
         17:5c:3a:99:88:bc:db:04:0a:9f:7d:8d:49:ff:f0:ad:9e:b8:
         8a:b1:35:b7:a9:f6:64:a9:9d:71:99:ac:46:ea:32:08:71:6b:
         b6:27:c9:90:2f:da:54:96:ed:9b:b3:f9:64:df:9b:d1:ea:e5:
         02:5b:49:ad:96:cf:24:c3:f8:ca:95:99:2b:20:a9:b3:f3:32:
         05:51:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----