Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
File:                     RFHoPa4So3HB3UnbNNm9Uqloi0o.cer (raw, json)
Hash identifier:          PeGKpNB1CsClGYcC2qX3RKHJ63jy7dyO8HI572pEXVw=
Subject key identifier:   44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C405BA0D82489863309242EB0B852
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206022
                          IP: 185.198.156.0/22
                          IP: 2a0a:8b40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:40:5b:a0:d8:24:89:86:33:09:24:2e:b0:b8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:89:f8:43:ca:20:35:18:f4:ce:bc:3f:04:
                    f7:99:12:94:9d:49:d0:da:26:0b:ed:c5:0a:2b:a1:
                    0d:ef:02:48:a4:48:d8:a7:58:07:40:d2:7e:4a:f2:
                    35:0e:74:c9:bf:1e:cf:a6:31:fd:fe:59:d7:0e:5d:
                    b2:8e:c5:4e:7e:b6:5e:52:68:90:e0:14:0d:32:ad:
                    fb:06:39:ae:30:df:0a:49:41:7a:c9:68:49:d8:ff:
                    00:85:30:21:72:75:bb:f3:d9:57:c5:ee:4e:eb:f0:
                    4a:99:0e:28:54:7e:0d:cd:1f:f8:10:e8:9a:00:6b:
                    af:d2:59:88:8e:41:e0:b2:5d:87:e0:34:fe:cf:0a:
                    43:1c:df:a8:ca:16:0c:ff:6d:80:14:b4:43:10:d7:
                    ba:d6:45:78:90:1d:46:7c:9a:26:aa:ef:a4:a9:34:
                    9a:7e:07:0e:b7:59:1d:b9:2e:a4:68:82:31:5d:37:
                    17:75:e3:3a:a8:3f:f7:7a:6a:7f:1f:a7:14:83:79:
                    2b:c4:5d:ff:7c:9f:d3:79:a5:6a:08:99:eb:94:cb:
                    8a:f5:a5:5a:c4:4a:59:e4:83:5d:e8:74:45:32:ed:
                    60:94:f7:88:c2:b4:7b:11:ba:f5:6e:4d:5b:d9:86:
                    fc:3e:b3:30:0d:51:59:4e:76:60:0b:fe:df:71:d9:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.156.0/22
                IPv6:
                  2a0a:8b40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206022

    Signature Algorithm: sha256WithRSAEncryption
         2c:12:b8:7d:89:b2:3b:ac:78:fb:75:44:b5:52:d5:24:da:db:
         4c:98:c0:ac:b4:e8:6e:47:1b:8c:8c:50:fd:04:32:f9:20:82:
         1c:b8:78:f6:82:0b:82:24:84:ac:f7:75:03:27:49:dc:ac:07:
         ed:85:36:92:f8:30:c7:70:3d:6c:54:d2:25:b2:61:69:7b:14:
         cf:14:2d:56:4e:a8:0b:be:b9:e7:d5:d0:38:e8:a7:a7:95:57:
         e1:af:23:06:cb:ca:78:bb:51:4e:41:2a:9a:44:a7:5f:76:c6:
         9f:ef:df:95:e7:02:4c:9a:16:3a:ef:d9:5c:19:11:ea:3b:9e:
         a1:49:37:f3:bf:df:0c:20:a6:fb:d7:dc:0f:24:6d:26:02:23:
         fa:fc:dc:3e:f6:98:42:c1:9d:05:20:89:82:10:c3:30:a8:5a:
         6e:6f:bc:57:83:83:bc:40:a7:82:cb:ad:93:46:d7:d5:0f:65:
         7c:29:c9:09:6f:47:d0:53:49:03:5b:27:22:00:c3:b1:f2:ae:
         e3:c9:d2:c4:c1:b3:31:91:12:79:a2:56:e1:52:54:17:24:5e:
         31:50:19:9e:d5:d1:f9:f9:78:45:44:e5:ab:1a:7e:a1:32:45:
         66:75:8a:b3:41:ee:35:59:e0:d2:f1:81:c4:08:46:b9:6c:e2:
         a5:c4:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----