Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
File:                     N-DLWK4j1HOuE6c0G3pzvdECig0.cer (raw, json)
Hash identifier:          SRphjxOhIT/UgFGqKpBqkhXI+GzcHArPF2FtEVailuU=
Subject key identifier:   37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252146B20278AB90FF02E314DFE2AB3C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206876
                          IP: 185.173.136.0/22
                          IP: 2a0b:5500::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:46:b2:02:78:ab:90:ff:02:e3:14:df:e2:ab:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:cd:3a:b6:98:ce:a2:e8:f5:b4:2f:81:97:
                    9a:68:b7:d3:2b:71:73:81:56:b8:dd:f4:63:56:b3:
                    be:8f:ad:62:ea:15:7c:01:fa:fc:f8:e7:d4:2b:c3:
                    3d:ba:ce:0f:12:06:d5:19:ea:5d:47:af:f5:fa:03:
                    3f:b2:bd:90:f8:8c:49:b0:b6:81:42:fb:32:3d:fe:
                    1c:32:c4:aa:c2:8e:5a:1f:e6:d7:31:f1:02:01:e9:
                    68:1c:b6:d7:e1:7c:9b:b5:c9:2c:82:c5:a5:bb:61:
                    fb:56:4f:54:54:3b:eb:3a:44:40:4e:54:37:8b:9e:
                    c0:83:f6:8d:b4:4d:fb:62:57:8e:9d:ed:21:a7:cc:
                    ab:8d:d8:ba:b6:a7:81:0d:69:b1:5f:0e:c0:19:3d:
                    d8:46:58:12:4a:0f:b9:b3:cd:f9:e3:be:7f:7c:14:
                    1a:8e:2f:59:ed:95:20:02:b7:0b:99:95:30:8b:cb:
                    d7:0f:cd:4e:d8:79:30:ea:3c:c0:1c:67:7f:af:b6:
                    70:97:61:67:66:50:3b:50:60:ab:72:81:82:37:fb:
                    a7:c1:d1:e0:a5:5f:87:34:47:33:95:b5:93:76:c4:
                    50:ed:e6:16:37:1f:04:ab:7b:0d:ae:96:86:ad:61:
                    f2:89:1c:ca:29:f7:9f:c0:be:20:64:55:3d:4a:af:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.173.136.0/22
                IPv6:
                  2a0b:5500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206876

    Signature Algorithm: sha256WithRSAEncryption
         52:45:4b:14:4d:eb:2d:85:6d:d0:66:d8:29:4a:25:38:5e:a6:
         70:1e:f5:fb:71:13:f2:f2:89:39:66:5a:00:e0:e6:7f:19:2f:
         3d:27:20:28:aa:9f:7f:a2:07:92:6f:36:05:eb:f7:54:61:c7:
         08:0a:e2:f0:d7:46:4e:a7:9a:68:81:f0:fd:40:ef:04:df:d2:
         40:c9:95:5c:47:be:9f:ce:cb:0d:ff:4a:f3:94:33:43:2f:11:
         cc:e4:ec:67:fb:64:ad:d6:91:0f:39:36:f1:61:1d:06:c3:73:
         be:fb:bd:17:85:16:ff:49:91:73:25:58:2f:5e:59:18:63:35:
         c2:e0:b3:a6:4e:4a:92:b0:eb:d5:79:5d:88:57:5b:c9:3b:60:
         80:41:e2:e5:b4:14:15:83:69:91:dd:e8:06:6d:1d:80:e5:05:
         e1:fd:00:de:51:23:86:5c:f3:9d:cc:cd:5d:98:e2:71:85:1e:
         c2:fb:e4:76:39:df:65:0c:6d:69:05:c9:d4:dd:5d:af:45:7e:
         be:12:7f:bd:d1:bd:56:83:2c:9f:57:55:e2:36:0d:4b:39:82:
         fc:80:7b:64:21:38:ff:bd:4c:90:29:ab:c5:f4:5b:7e:88:62:
         05:84:2f:25:4b:1c:39:b5:76:bf:ae:0e:cc:b4:dd:ac:8b:a7:
         3c:ad:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----