Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
File:                     PRRSju_C35P_tOdPobZQO3btls4.cer (raw, json)
Hash identifier:          icciJH729UZTesj5PW3r30+McTyewYFAlvWZeWjp+Lg=
Subject key identifier:   3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D971CE9B4E1A35D33A865ADB21C147
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49756
                          IP: 194.242.20.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:71:ce:9b:4e:1a:35:d3:3a:86:5a:db:21:c1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:aa:4a:ca:6c:76:07:58:c8:91:21:85:34:
                    90:0e:6f:a2:31:7a:7b:89:c1:53:a6:66:03:86:d8:
                    57:31:d8:ab:7a:a7:6c:b5:f7:db:c9:5b:14:e1:8c:
                    83:2d:24:ce:92:f3:58:9d:ba:0f:8b:7a:27:09:87:
                    f0:02:eb:b6:54:a7:48:5e:17:81:0c:03:0f:76:8b:
                    bb:74:e3:7d:93:71:c6:e9:da:99:80:7a:6f:56:1b:
                    2c:4a:1b:f9:a4:c6:b4:27:b0:33:7f:8b:66:ae:2d:
                    29:65:8c:28:dd:fb:c3:d1:da:f1:de:50:c0:fe:ce:
                    86:c1:e4:34:05:66:b9:b8:25:2d:5b:2f:35:40:09:
                    5f:87:e7:fe:e5:2d:96:fa:a1:ea:89:fa:b6:f4:8e:
                    2b:ec:94:28:f5:6c:bf:20:46:98:3c:48:43:b7:0a:
                    75:43:aa:40:3a:7b:f6:1c:a6:99:9a:2c:75:10:98:
                    8f:8c:c1:28:30:e8:c1:ca:3c:37:23:79:ec:a9:3b:
                    d2:0f:70:80:87:b6:b7:ec:a3:0d:d6:c1:35:e6:6e:
                    c2:2a:5c:53:49:d7:ea:77:db:ed:85:05:38:5c:5f:
                    13:d6:54:d6:c9:2d:4d:b9:54:99:dd:f9:3c:33:c0:
                    ce:66:6b:04:57:c4:a9:eb:48:6c:40:46:32:77:70:
                    83:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.242.20.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49756

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:03:81:f1:0b:74:37:60:17:f5:9b:2c:48:49:ce:df:c9:
         97:ab:94:6a:ba:f8:8b:88:80:a9:0b:48:c3:1a:a2:3b:fd:c3:
         8a:b0:3c:05:4f:76:df:29:45:41:19:44:d1:94:bd:d2:e1:27:
         e2:10:ff:70:a8:45:bd:3f:69:98:fe:5d:b1:36:71:7d:8a:9e:
         84:42:37:e2:7b:aa:b4:6b:13:67:4a:f1:1b:63:6c:e5:5a:19:
         1f:d4:39:bd:51:04:cf:41:e6:3d:07:4c:d5:c2:1c:b6:77:b8:
         1c:0a:e0:b7:e1:d5:08:12:a6:bb:b9:63:3a:dc:f5:51:5d:cc:
         65:30:cf:9a:0b:5e:22:ca:0b:48:6b:53:42:dc:79:7f:f6:b6:
         70:01:3f:74:ec:95:77:93:ee:76:78:c6:c0:de:73:98:1e:9b:
         ec:10:f4:c9:67:23:00:73:c5:f0:17:7e:92:8e:e5:79:4b:7d:
         4b:ff:20:7b:8f:9c:78:ef:52:f0:02:e0:88:31:d4:b0:a5:a7:
         a2:42:bd:49:01:a7:c7:e3:14:4a:aa:f7:d7:2c:f6:16:da:2d:
         17:74:bb:95:ae:5a:de:db:f3:ad:8c:ee:1d:9e:37:1b:1a:a9:
         8d:64:63:ca:4e:0b:e5:45:27:36:14:f3:17:4d:ed:30:68:00:
         2f:91:5b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----