Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
File:                     RdGncWAlFxEzoyAslGKg6r1mBoI.cer (raw, json)
Hash identifier:          KLchslK0MA/yhFJjwHg9X8brrOFDQMfzioL/5537CMQ=
Subject key identifier:   45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194282402E9B223ED7C6842425607B9D595
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57061
                          IP: 91.230.98.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:24:02:e9:b2:23:ed:7c:68:42:42:56:07:b9:d5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=45d1a7716025171133a3202c9462a0eabd660682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5d:78:af:97:9f:67:b9:57:04:31:7b:86:d5:
                    7a:73:67:f3:33:a5:45:b5:16:8b:0e:e1:c1:03:8f:
                    c2:f4:50:27:71:db:f5:2d:78:b7:bf:a1:a5:2c:18:
                    c1:25:51:03:d1:0c:1b:67:f8:d6:bc:cd:e8:96:57:
                    00:f7:ee:60:43:e6:47:75:e4:31:44:34:99:c7:23:
                    5a:18:da:85:50:95:5b:3c:c7:68:b9:41:a2:61:16:
                    a5:8e:8e:94:3b:ad:cc:f5:6b:29:b0:c7:fe:ab:47:
                    51:fc:52:10:d8:c6:e3:a1:e5:fa:f7:c2:07:d2:57:
                    30:84:a6:47:a6:d6:22:bd:2d:c1:ba:57:34:a7:60:
                    ef:87:3a:48:7b:f2:47:95:3b:c8:2d:a6:5e:10:aa:
                    5c:07:f6:bf:c4:4d:dd:72:80:f6:a4:75:90:14:83:
                    f7:a8:e1:7a:a8:0f:d4:3e:af:ff:46:72:8c:11:8f:
                    a5:62:4f:2f:60:eb:e3:d3:9c:45:11:89:b4:27:46:
                    e1:d2:5d:81:47:7e:97:dc:fd:5a:f9:85:b9:f9:0e:
                    45:54:4e:ce:fc:ce:ab:4d:0a:1f:a4:26:7a:04:62:
                    0a:9c:b3:49:48:69:b3:8d:c1:f1:6f:60:e2:ae:dc:
                    5a:9e:db:20:5b:28:39:26:e8:e1:35:40:c4:5d:8f:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.98.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57061

    Signature Algorithm: sha256WithRSAEncryption
         44:c5:eb:1b:bf:0f:bd:c0:8d:63:fd:2d:ed:40:41:0a:8f:19:
         d3:bf:67:8f:e1:57:d4:ec:09:3b:0b:d1:e1:23:1a:20:7a:82:
         56:b5:45:20:5a:8b:16:a3:85:46:70:18:88:89:f9:64:a5:91:
         44:77:c3:1e:21:06:4e:f4:c1:8b:e1:d1:3d:73:ec:eb:ed:9d:
         c9:68:d4:da:d4:37:af:d8:f6:2e:8e:5a:2d:c4:3c:08:12:a1:
         ff:d6:6a:6d:4a:56:f9:4e:58:cf:5b:3b:b7:4a:1d:1f:bb:b7:
         15:be:9d:4a:cf:45:5a:93:9f:27:a9:24:5a:d4:9f:bd:0a:fe:
         de:aa:15:6a:2c:26:e0:d9:bb:bd:0e:d9:56:d1:ed:f2:94:21:
         49:c6:2d:87:94:a4:4d:8e:d3:db:cb:ec:42:3a:38:e2:7b:0d:
         48:bb:27:5e:98:4b:6b:3b:17:3d:09:da:49:bd:70:09:85:93:
         53:57:37:47:fd:5c:b4:6c:3c:86:40:b5:af:ca:c6:07:23:a2:
         c8:6d:51:dd:55:9c:04:eb:f4:fc:69:e8:68:1c:36:5c:c2:6f:
         bf:84:4f:bb:25:57:13:e6:c4:db:d3:67:ab:7d:74:80:a6:7a:
         ab:d4:0a:0d:26:5a:de:e1:47:12:af:99:06:6e:5a:e8:02:c5:
         2a:5a:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----