Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
File:                     Po3UOSjt-xIA77xixEH5zSkEhYU.cer (raw, json)
Hash identifier:          lcQaeMEMqb2MozUDNZCnabdpZ6DansjcrBLEMmMOSQg=
Subject key identifier:   3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B28DD5E9C6E78F10B662A47ADADD2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60049
                          IP: 185.57.232.0/22
                          IP: 2a02:46e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:28:dd:5e:9c:6e:78:f1:0b:66:2a:47:ad:ad:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3e8dd43928edfb1200efbc62c441f9cd29048585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:b4:78:0a:ab:33:fe:2c:55:63:01:3a:7b:
                    73:c7:99:19:75:d5:15:77:88:4c:00:dd:92:65:fe:
                    67:8f:75:83:a8:68:34:62:12:88:51:f7:f5:01:cd:
                    ed:d7:16:3d:18:7e:b4:6a:e9:f6:7f:6b:46:0f:89:
                    14:64:85:9d:ef:7e:e4:95:16:8e:7b:43:8b:ad:9b:
                    71:04:de:53:15:23:87:35:43:6b:f4:cc:c6:6a:33:
                    d8:4d:96:ae:bd:67:26:46:fa:c2:ad:82:1c:10:3b:
                    da:27:b5:c8:bd:b5:56:dd:38:eb:5f:d5:0a:3e:d9:
                    3b:fc:d7:9a:4b:b1:fc:7f:7d:1c:82:8d:ba:9d:f8:
                    48:6e:34:3b:e0:87:b2:82:5c:79:96:01:55:74:33:
                    c7:91:8b:ab:1b:e2:49:5f:84:dd:62:13:e8:ad:41:
                    fd:85:ab:a7:66:ab:83:5d:37:b3:86:f4:19:a5:1b:
                    22:91:95:d1:82:0c:36:ad:57:01:75:eb:d8:3f:e1:
                    98:4e:c6:bb:05:8d:c6:b6:dc:7d:5a:82:59:4d:73:
                    03:df:71:08:e8:ae:dc:20:ec:1b:a5:da:90:f3:da:
                    b5:c9:ae:43:b1:ca:2d:0c:88:fc:29:c8:ed:36:49:
                    bc:49:96:78:8c:ab:92:56:68:6c:01:68:29:9f:17:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.232.0/22
                IPv6:
                  2a02:46e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60049

    Signature Algorithm: sha256WithRSAEncryption
         95:bb:3a:cb:7e:ac:98:09:5c:6e:ed:79:ff:a6:28:90:21:51:
         1d:ee:ba:39:c2:0b:1b:94:fe:97:4f:b1:ac:73:dc:af:e6:d8:
         1f:cb:3c:57:80:99:20:b3:e3:34:dc:0c:81:bd:44:a1:a4:4d:
         7d:7d:33:99:c6:05:03:c7:5e:e4:17:c7:a8:aa:0c:1b:15:6c:
         74:d6:b8:4c:d2:97:f6:82:53:39:f6:0d:25:a2:9e:77:51:46:
         bb:4d:64:66:65:ba:cf:b9:8b:23:fb:79:52:cb:54:d7:8f:c7:
         c5:b5:a6:13:06:5e:70:85:d0:41:e7:f0:6c:c1:8e:64:02:5f:
         67:13:64:b0:9c:b6:c6:a4:13:3c:7b:9b:df:cf:7d:48:14:1c:
         21:e9:67:6e:65:9d:ba:18:40:f4:f4:f1:db:3a:2c:59:39:e3:
         67:b3:b5:53:f3:86:48:0a:64:52:88:4d:8a:a0:3d:b1:4c:e6:
         61:c7:2b:a6:82:d0:08:2f:9d:5f:a3:83:52:d4:20:71:50:b1:
         44:79:f5:07:9c:92:30:4b:39:29:cc:e8:d9:2a:c7:2f:c2:9f:
         73:a5:42:e0:a4:c4:34:f1:e6:8c:3d:c5:0d:0e:5d:10:80:e5:
         6a:a2:88:c4:08:c9:24:1b:1c:82:16:c9:f5:53:a8:03:d6:25:
         c8:74:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----