Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
File:                     NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer (raw, json)
Hash identifier:          JOhjg8ChLaauGsdToBZcmw707PkJpHK7TgMNOOjDvys=
Subject key identifier:   34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195CA2784DE3A758CB81DA6E6FC6C45666E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Mar 2025 21:55:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57447
                          IP: 185.161.122.0/24
                          IP: 2a05:9440::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ca:27:84:de:3a:75:8c:b8:1d:a6:e6:fc:6c:45:66:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 24 21:55:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:2c:4d:fc:70:56:b8:8a:b3:fb:09:d6:36:
                    11:4b:c1:b5:ce:8b:8d:f7:7b:14:85:f3:f1:52:9a:
                    66:47:fb:1c:51:31:f1:2d:54:56:0f:81:65:f0:35:
                    ad:0f:92:73:13:9d:42:67:bb:f2:a3:c0:4f:8d:6e:
                    6c:44:88:8e:25:d4:2c:0b:9f:81:9d:8b:19:0d:52:
                    4e:af:50:cc:b6:20:5d:b9:a3:0d:71:78:be:61:c4:
                    96:70:f2:1e:20:37:de:e6:19:9c:bb:89:81:68:49:
                    d2:e5:9f:ec:81:19:b8:7e:33:53:e3:c0:0c:8e:89:
                    28:03:0e:fb:70:b0:d5:1f:9f:aa:8d:59:0e:28:60:
                    06:9c:40:a7:d4:30:6c:e2:29:56:4d:cd:ca:57:43:
                    84:e1:9b:9a:9c:fa:87:10:d8:ba:d0:c7:d3:a6:1b:
                    ad:7e:0b:00:47:8b:cf:f6:b0:9c:97:4b:d7:32:1a:
                    ae:d2:06:69:ef:38:45:bb:42:f8:10:73:2a:95:20:
                    94:5c:11:e7:8b:e5:6d:41:04:b8:32:49:76:69:47:
                    ff:57:2c:4a:1a:fa:1d:c0:f8:a1:75:37:01:5d:1f:
                    da:f4:15:63:e4:a1:63:99:8d:1e:96:bd:51:b5:e7:
                    ae:14:3b:52:61:2f:fe:10:14:c7:17:0e:b1:d6:cc:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.122.0/24
                IPv6:
                  2a05:9440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57447

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:30:6c:ad:85:ef:87:f6:16:6a:01:9a:ee:8b:57:4d:ac:
         ef:9e:22:aa:88:f0:21:94:1c:ca:f9:8e:47:59:e1:fc:ca:38:
         af:fa:94:b6:bb:b1:3e:76:f2:c2:e8:cc:38:e8:76:7d:05:55:
         60:1e:0e:ab:47:fd:98:01:e4:16:f0:39:93:b5:35:0c:0b:c5:
         8e:23:8a:13:55:a0:03:79:5d:de:1e:73:db:ee:e2:46:12:88:
         ed:02:2f:21:e3:21:5c:8f:04:c6:f8:7e:db:90:50:a9:8b:f7:
         b6:8e:c7:ca:1c:5a:97:40:31:30:cd:1a:ee:c8:55:e1:5f:d9:
         9d:a6:13:fa:6b:0c:a3:db:87:61:eb:0c:0d:50:0c:99:0a:51:
         50:4d:c2:0a:ca:6c:cc:ca:d2:af:1d:bd:4c:8a:b3:48:2d:48:
         a8:9f:6e:98:e9:bb:81:f1:02:a3:eb:e1:51:7f:97:05:8f:2e:
         e0:de:19:f5:9f:b3:8a:46:80:15:bb:9c:5e:07:06:44:f6:db:
         42:90:96:a2:58:49:87:7e:1e:6d:98:51:60:0f:1f:ab:89:49:
         b6:a4:47:16:23:a5:6e:c2:9b:9e:36:bd:48:8d:5b:90:aa:28:
         0c:5f:e1:0f:a7:b6:d6:ea:89:80:04:76:4d:a1:7b:38:94:70:
         3b:f3:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----