Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
File:                     N4ezJLDTL7GjZ4sCxIIobUwmug8.cer (raw, json)
Hash identifier:          2QNQ/l2jgyjRzdcy0TYZiDNX+SEeh9WBawHPyiDdLmU=
Subject key identifier:   37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1F6EC8460E635448F96E5891984BC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205315
                          IP: 185.222.116.0/22
                          IP: 2a0c:3800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:f6:ec:84:60:e6:35:44:8f:96:e5:89:19:84:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:b3:4d:60:34:2b:7b:35:26:e9:e7:50:a0:
                    b1:7f:3a:7f:f7:b7:52:10:c6:89:f6:3b:44:14:c0:
                    cb:e5:6f:33:d4:cb:78:77:c0:3c:e4:54:ef:6f:45:
                    1a:f9:d0:03:c2:88:2c:2d:92:79:1f:5b:88:9f:36:
                    ab:02:df:fb:bf:15:db:0c:1f:45:fb:73:ae:f0:61:
                    36:92:3e:7b:81:bc:67:a2:8b:76:e9:f8:e6:e5:10:
                    76:09:b4:a0:dc:e0:c2:a9:e9:4e:8b:65:ee:e7:0f:
                    84:54:d0:dd:05:1b:76:2f:42:8f:3b:aa:9a:ba:06:
                    9e:f2:e1:34:19:4d:b9:0d:b0:e2:09:3d:23:ee:fe:
                    30:6a:da:30:7e:9b:16:41:b1:ea:8f:ff:98:62:c6:
                    4a:fc:74:fb:79:a2:02:cd:df:ad:a5:8b:56:49:27:
                    b2:d4:c9:a0:c5:1e:98:42:10:31:8b:97:b5:ae:ed:
                    c5:c1:a9:c7:f4:99:d1:d2:b1:35:b4:fb:fc:4c:38:
                    ea:70:5d:26:aa:56:67:a5:38:28:99:18:1e:98:81:
                    9d:42:e8:23:1f:c6:f9:cb:a9:d5:38:29:6c:b5:2d:
                    4e:ee:84:19:fc:98:89:52:47:7a:0a:88:ef:32:ae:
                    99:b4:a2:71:eb:d9:04:54:e4:e7:d5:9a:99:08:c8:
                    49:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.116.0/22
                IPv6:
                  2a0c:3800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205315

    Signature Algorithm: sha256WithRSAEncryption
         6b:dd:f5:48:b9:ed:98:4c:37:bc:ec:5b:2a:40:ec:96:f9:e3:
         63:28:07:b6:46:21:c7:d3:77:b7:8f:ef:c5:94:7c:5a:70:cd:
         c9:b9:b1:01:12:5c:8f:40:c0:06:a9:f1:fc:f0:13:16:85:9f:
         62:17:3b:46:77:a1:44:43:fa:1a:5f:d3:7e:78:91:41:75:29:
         12:50:93:c6:a1:57:78:fe:8a:b0:41:96:6d:89:4d:8f:33:ae:
         62:fe:6c:a7:85:4d:0b:f4:8b:8a:1b:33:98:d3:c2:71:15:71:
         23:f3:01:69:11:12:2e:06:3e:52:99:92:94:ac:2c:fb:eb:d9:
         45:fb:a7:a1:ab:fe:53:a6:81:14:ad:eb:47:d4:ab:0f:1c:cd:
         6b:b8:df:2e:f4:b0:01:46:5d:9a:67:1c:da:c2:f0:84:36:7b:
         52:5f:02:ad:04:6d:ab:92:9d:9d:db:00:4a:f1:c1:d1:4c:f4:
         29:ff:c9:cd:1a:ce:ca:e7:19:1f:72:ea:fb:74:31:a1:3f:a8:
         46:17:a5:d7:26:0e:e8:4b:ec:28:59:9e:ec:61:d5:70:a6:89:
         40:1f:bc:6d:10:60:53:46:b4:00:40:f8:55:df:83:96:17:d0:
         48:b6:d3:e4:b6:e5:b1:41:25:7d:44:7d:11:36:e6:95:11:f5:
         f8:11:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----