Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
File:                     MgJHUW6RAX4tvLVyyg8poSKBrPA.cer (raw, json)
Hash identifier:          L6Y3VRJONMDUTizjcUma7O8i1SF6Sqn8pzcX64oEIIw=
Subject key identifier:   32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B997739B6A56FCC704C0DD708C458
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47506
                          IP: 93.174.184.0/21
                          IP: 185.39.32.0/22
                          IP: 2a02:e60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:99:77:39:b6:a5:6f:cc:70:4c:0d:d7:08:c4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=320247516e91017e2dbcb572ca0f29a12281acf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:c2:72:da:33:c4:87:30:fd:40:d0:a4:eb:
                    12:b2:f0:d6:36:d0:42:85:4a:7e:cf:92:59:da:a9:
                    05:3d:e5:4a:09:23:85:a6:c5:02:22:65:25:6b:ee:
                    76:b5:c6:42:be:fd:bd:53:75:f9:ff:b2:45:3a:54:
                    37:92:64:19:87:ca:dc:38:2f:c6:12:75:61:cb:2a:
                    25:8e:d0:a4:b4:b6:57:b4:77:77:f7:d0:54:8e:06:
                    8f:53:b9:0d:33:80:fc:93:40:77:f9:b5:9c:bb:03:
                    7c:11:3f:3e:28:94:b9:55:d0:0a:12:7f:09:88:5d:
                    f1:9b:60:18:60:3d:01:f2:d3:86:98:5c:80:b2:bd:
                    81:0a:27:5c:39:65:7b:ac:ce:18:76:64:cf:88:4e:
                    65:8c:90:01:5c:81:18:6a:19:b7:c0:b5:4b:a6:f4:
                    1f:37:18:1c:d5:35:47:fe:f9:b6:66:b5:01:5f:b1:
                    f7:8e:fb:6b:0f:83:b1:84:6d:43:ff:17:f0:09:71:
                    94:4b:30:dc:d2:8f:30:b6:3f:6e:6c:3a:54:e0:8b:
                    d1:d6:6f:7e:dd:9b:1c:6f:fe:3e:9f:4f:bf:de:a5:
                    03:a6:a1:35:e0:1c:74:1d:4a:e1:21:e8:ad:07:dd:
                    fb:21:78:c2:61:4b:c2:6b:83:1e:46:a0:be:ed:38:
                    33:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.174.184.0/21
                  185.39.32.0/22
                IPv6:
                  2a02:e60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47506

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:f2:47:3d:7c:8e:e0:10:24:78:73:63:b6:20:1c:85:ec:
         5f:88:67:18:2f:ff:db:cd:72:13:7e:de:58:fe:99:0b:71:f5:
         4d:04:d4:58:52:2b:e4:d3:ec:ac:5f:39:1e:ab:07:76:c4:0e:
         72:f1:36:56:0d:65:81:88:c0:15:cd:9a:77:c5:e5:f4:e9:32:
         b5:d5:0b:e5:a4:b5:97:7b:d1:91:4a:92:35:c4:39:08:a5:b4:
         e7:ab:87:a3:16:4c:6a:28:0e:63:9e:ed:06:50:47:b2:66:d0:
         e6:13:be:6b:dd:ea:c7:2e:cf:7a:67:bd:fd:f0:29:89:6c:04:
         34:0a:90:dc:04:fe:55:04:e0:18:d9:76:19:e7:82:7d:71:88:
         62:64:18:f6:53:6c:d8:00:9f:07:ad:0b:f8:30:8a:c0:d7:1d:
         1e:31:7a:d0:ec:a1:14:3b:bd:9d:54:cf:46:93:2e:74:13:dd:
         37:a2:04:8f:42:75:c1:f2:07:8b:51:a6:ad:02:2f:c7:83:b6:
         a0:93:52:01:76:d6:0c:fb:35:e7:2c:67:78:e4:b3:9b:f7:9d:
         3b:0c:df:06:40:e2:64:0b:dc:cb:3c:3d:62:d8:11:86:d0:59:
         d3:2e:39:5a:90:54:7e:3e:c7:a7:d3:c1:1d:92:ff:e0:39:2e:
         2c:28:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----