Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
File:                     PSOEt4Txl-oD2sL-2niV_Et0Byk.cer (raw, json)
Hash identifier:          neOHZK17cN3rTsIWtMEyFS+3qUktSWi5Jd/KwrMcUaw=
Subject key identifier:   3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB297AA4F760B8022BAF799A28B7EC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206626
                          IP: 185.85.56.0/22
                          IP: 2a05:ab00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:29:7a:a4:f7:60:b8:02:2b:af:79:9a:28:b7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3d2384b784f197ea03dac2feda7895fc4b740729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:95:fd:7e:ad:4a:b6:05:8b:79:fd:b9:04:
                    40:57:a0:42:b3:b4:7f:20:ee:25:6a:a8:dd:e9:0e:
                    cf:4e:4f:1b:44:d0:a1:70:01:d8:14:60:5a:a4:f3:
                    e2:d8:f2:78:3d:8c:ee:96:9e:16:48:5a:a6:20:f4:
                    b4:32:d1:c3:8f:40:34:e1:cf:b9:28:b6:3c:c7:84:
                    39:d7:04:ed:b0:fc:9f:e9:5f:df:57:43:6c:fc:ee:
                    c7:99:8b:3b:48:54:8d:cd:47:1d:af:f4:17:02:a7:
                    05:0d:5a:98:4b:45:f2:8f:17:4e:ef:d1:47:7f:97:
                    da:2a:3a:e2:97:c9:ff:4c:85:a1:9c:f8:73:55:3e:
                    c6:b5:08:61:70:24:d2:53:b7:58:e8:28:77:79:74:
                    41:c9:00:4d:fa:19:c0:07:07:17:46:15:29:27:fe:
                    cf:d9:92:ef:f6:96:52:ec:6b:63:e3:77:f6:64:39:
                    10:ba:9e:a8:57:d3:a1:63:94:37:55:cb:6e:b1:35:
                    23:a2:56:d7:60:5b:2a:79:ca:4c:ff:d4:a1:a5:7c:
                    c1:fb:6b:b6:b1:fb:3b:74:5d:d8:cb:8f:db:59:37:
                    f8:ae:fb:0c:a9:e8:66:16:e1:96:77:68:fe:ef:d2:
                    1b:3f:aa:b7:3d:05:af:91:ab:fb:20:c2:d5:60:c8:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.85.56.0/22
                IPv6:
                  2a05:ab00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206626

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:56:43:50:da:0e:ef:89:b1:a4:f9:f7:0f:49:0f:ca:a4:
         98:30:6e:cf:09:25:a6:1c:4d:68:c0:b6:75:6b:0b:17:3a:aa:
         79:72:11:28:ef:37:03:e6:0c:63:80:89:e4:07:ee:5c:ec:1d:
         91:2d:4c:49:02:18:f2:19:82:25:01:e5:07:ad:f3:e1:f6:68:
         c8:a5:f5:c7:50:22:b2:8d:6e:6d:3e:2b:08:e1:64:f8:01:ba:
         c4:97:e2:cf:80:37:de:88:2a:9c:74:79:ea:3c:0e:89:ef:06:
         d0:c9:68:32:e8:67:1d:c1:b0:8b:82:ed:69:53:b6:13:fd:de:
         3a:b7:c0:94:0d:fa:79:fd:f7:7a:db:18:31:de:c7:15:14:32:
         9c:02:19:6f:a0:15:08:2c:3c:db:53:c3:90:b1:19:5a:ec:2d:
         94:14:13:26:4f:a4:f3:5e:0b:ce:97:6a:f5:8b:5e:51:14:e5:
         e2:02:e0:42:c1:20:1f:15:1a:66:26:ef:9c:e7:55:f3:0f:38:
         17:41:a4:0c:23:9f:dc:18:31:aa:36:3f:01:db:60:94:49:ab:
         18:98:eb:9a:db:a2:b8:a0:a6:34:8f:26:d2:0c:39:c0:c0:b4:
         78:ad:89:64:df:54:63:1b:3a:65:4b:77:3c:b5:d6:dc:3a:ef:
         99:07:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----