Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
File:                     NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer (raw, json)
Hash identifier:          e424Drm2XUVvFy5dVn9Io3jrC1UdQ5/+a3MXIJ6OXl8=
Subject key identifier:   34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1BE8C7D895B2127FC12FF6CFA6E20
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48168
                          IP: 194.113.144.0/22
                          IP: 2a07:e300::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:be:8c:7d:89:5b:21:27:fc:12:ff:6c:fa:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=340551ace81314829351a27e399aeddb33246155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:39:30:01:21:1f:44:a4:63:4d:de:18:e9:
                    5d:6c:6f:6b:b0:41:4c:e3:ee:9f:04:83:b0:0a:7c:
                    96:52:79:b2:09:60:dd:cb:74:0b:f8:8c:fe:42:af:
                    ab:76:08:5e:c7:e4:f4:33:d2:53:d0:11:58:f0:e6:
                    33:a4:1e:db:08:61:01:56:00:6e:89:95:db:13:90:
                    de:3e:02:78:2d:1f:71:1f:1f:94:8b:54:27:30:01:
                    28:95:2d:1f:b5:ac:f6:0d:9c:c7:27:73:77:ad:c1:
                    56:ea:7f:a3:c8:d2:69:11:5e:c1:6b:77:88:36:24:
                    4d:20:19:a0:00:0d:e9:15:e9:f0:2a:78:14:ec:35:
                    5a:c2:a3:7a:0f:3a:af:8e:19:65:19:30:b2:ef:97:
                    c3:db:8a:3e:a6:91:1d:b4:37:0b:c6:9b:23:d3:5a:
                    a8:47:76:13:8a:9f:70:11:77:36:96:99:52:04:60:
                    b9:81:c9:a4:b9:57:e4:b6:50:8d:01:de:cd:57:f7:
                    68:aa:c6:90:6a:5f:d0:ef:45:e4:9e:02:d9:3a:0d:
                    b5:cb:3c:a1:a7:a2:50:2c:c5:38:0e:3a:8f:5d:ad:
                    0b:11:ee:7e:93:21:88:b4:2a:59:a5:23:e6:5c:ec:
                    04:eb:87:7e:09:f9:35:f4:81:d9:ea:78:47:f2:94:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.144.0/22
                IPv6:
                  2a07:e300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48168

    Signature Algorithm: sha256WithRSAEncryption
         6e:56:6d:d6:27:28:72:c1:77:05:a7:a1:0c:f0:28:fc:45:33:
         90:36:a8:df:5e:b2:37:ca:8f:28:ee:10:8d:8b:bd:a0:ca:7c:
         88:18:5b:c5:cf:25:fc:06:8b:4d:e6:e2:da:7b:cc:5b:75:40:
         5c:06:6c:65:10:3f:e2:3f:8a:5c:a3:c2:43:48:de:c0:17:0f:
         9f:9a:8b:b9:b2:1a:17:57:a9:ed:57:d3:ba:4d:de:b7:a7:de:
         bd:14:87:94:a9:28:3c:3b:4f:7c:44:a9:72:bc:4b:25:d3:ba:
         f4:a7:da:6c:9e:7c:2f:96:25:1c:98:1c:4d:d7:91:3a:ce:0a:
         30:3b:0c:b4:68:dc:3e:80:04:c1:20:e1:b0:df:90:4d:3e:91:
         ce:48:5e:75:6a:39:b6:d7:07:40:ef:14:e3:35:ce:b9:ca:04:
         4c:17:44:78:fc:4c:4e:9d:b2:96:56:b5:2f:ea:41:bb:c7:a0:
         cb:b3:84:27:7b:6e:4f:e6:62:e0:73:ec:70:e3:9b:5f:7b:1b:
         00:85:43:1c:b6:a1:2c:c3:f9:d3:7a:b4:25:26:aa:57:50:79:
         1e:7f:75:f0:ee:a7:97:9c:a7:10:de:88:e3:ac:52:9e:12:11:
         d8:40:a8:4a:17:f9:d1:b2:f9:3f:40:fd:17:a4:94:be:7d:10:
         f9:ee:08:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----