Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
File:                     RA6IwxN_ipFffaG1wDQcoYwsI0w.cer (raw, json)
Hash identifier:          aZEs5V5uzMLjtE8hnhnjF9RZ8hW7GYRAA8AR0/7zW5A=
Subject key identifier:   44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0196218B01926349735B0F51CFBE5D5210FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Apr 2025 21:11:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47146
                          AS: 48937
                          IP: 93.189.192.0/21
                          IP: 195.149.65.0/24
                          IP: 213.5.168.0/21
                          IP: 2a00:7680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:21:8b:01:92:63:49:73:5b:0f:51:cf:be:5d:52:10:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 10 21:11:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:ac:23:71:7b:e9:1b:cf:45:98:a6:de:cb:
                    31:17:6c:0d:b9:ee:4b:82:5d:64:f6:85:fa:cd:70:
                    2e:ae:b1:41:55:1a:ba:61:05:ea:b8:33:be:8c:14:
                    bf:f1:f8:d2:ae:19:1b:51:24:93:43:6e:09:b0:7f:
                    b0:8f:bd:ec:07:1a:f9:4b:d0:1f:f8:93:e5:b9:b4:
                    de:02:d6:82:a4:ed:05:07:b3:27:50:bf:23:43:83:
                    08:bb:f1:9e:2b:ef:cf:06:5d:72:a3:da:2b:16:c3:
                    8c:58:e0:24:c6:16:ef:d1:fa:ca:74:8f:50:ff:41:
                    8a:97:dd:d4:bf:3b:a7:77:86:89:2a:fd:78:f2:03:
                    96:51:f8:5c:bc:e1:a7:cd:d7:ae:3e:35:c3:90:04:
                    c8:86:80:af:d4:26:98:31:09:27:53:07:83:43:4f:
                    49:a3:51:e0:3e:fd:07:33:b1:6f:a5:5a:aa:1d:39:
                    b1:09:57:4b:3f:74:9e:83:d8:bf:ff:b2:7d:3a:2b:
                    1c:04:c5:4d:e6:9a:e2:51:9e:5d:8b:bf:67:6f:71:
                    78:5a:8e:95:f4:05:cd:a2:87:b5:bb:44:1b:93:4e:
                    af:7a:25:47:cf:5d:87:f1:db:25:60:0f:6d:0c:f6:
                    96:0a:8a:ed:4a:04:d4:aa:f9:eb:1e:65:84:70:3a:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.189.192.0/21
                  195.149.65.0/24
                  213.5.168.0/21
                IPv6:
                  2a00:7680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47146
                  48937

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:1f:a2:07:d5:a0:02:ea:bb:72:0b:71:c3:42:c3:55:f1:
         5f:dc:0e:9e:44:9e:c3:22:01:97:da:b1:ae:3f:a2:e5:29:19:
         95:91:f6:39:38:d7:65:3a:e0:f9:55:d3:f1:b6:67:bb:47:61:
         93:85:54:8c:16:f7:43:ca:9c:be:e0:77:cb:1f:5a:24:66:e3:
         75:60:5c:07:d2:2c:46:b1:87:f3:b1:a5:94:cc:76:3a:fb:4e:
         96:fb:77:a1:07:e8:de:e0:5c:1b:8f:61:e5:39:f7:1e:da:42:
         12:31:36:d6:18:24:a6:75:76:78:35:fc:84:4e:c6:f0:33:2f:
         20:11:34:19:5c:3f:e2:d0:66:3f:04:6b:e5:24:fb:66:ac:80:
         32:57:e9:d1:95:7d:97:3c:31:91:98:c3:e6:c9:d8:06:ee:30:
         16:40:f7:4a:40:b0:e1:64:6d:00:21:87:ac:d4:85:d9:74:f7:
         d1:b1:27:97:24:c2:4f:2a:3d:a8:46:f0:b4:9d:df:91:af:77:
         db:fc:d5:a9:70:88:94:a1:33:da:4f:8d:b8:d3:cb:48:a0:a4:
         69:da:3b:a9:31:7d:8d:29:b6:d1:12:a4:45:42:94:75:be:a1:
         37:8f:f0:c5:3a:7e:74:db:01:c1:54:94:c7:64:77:84:bc:b5:
         f4:33:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----