Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
File:                     RlDGwCqb3k4XGH8FsOypUEg7-S0.cer (raw, json)
Hash identifier:          8U4Nzf6embD3pXnbKDUwjPibCzSxybgRKCFuJmVaQoY=
Subject key identifier:   46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3B3AD837A8B9AA770CB199F921D51
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202743
                          IP: 185.155.20.0/22
                          IP: 188.211.28.0/23
                          IP: 2a0a:b080::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:b3:ad:83:7a:8b:9a:a7:70:cb:19:9f:92:1d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:37:1c:d2:24:dc:57:ff:4c:30:d7:f1:1e:
                    ac:bd:6a:a0:12:37:9a:52:55:2b:5a:5d:0c:c0:01:
                    64:d8:b9:38:d9:bc:f1:eb:ef:06:9d:e5:d2:83:64:
                    b4:84:6c:6e:37:82:a5:69:d4:c5:3f:bb:54:9e:9c:
                    98:c6:72:e5:f2:53:f9:7f:6c:c7:a3:0f:a1:1b:52:
                    45:7d:9f:30:24:3c:37:54:21:54:fb:bc:2d:d9:a3:
                    25:95:ab:29:bf:5d:5b:48:14:9d:06:e8:72:b2:9c:
                    fa:e3:0a:81:09:5a:68:90:36:fb:94:1a:c6:8e:9d:
                    ad:da:84:4a:4c:44:d0:1d:bf:51:2d:a1:56:fb:38:
                    bb:0e:2c:7a:14:b8:75:5e:77:c1:0a:a2:25:09:7b:
                    7e:4d:4e:9f:b7:d6:f5:4a:ca:da:81:9b:4f:64:5e:
                    04:a1:e4:c4:7d:e0:5a:a3:8e:bc:72:71:8e:e3:05:
                    9a:e3:04:10:5d:ad:00:85:4f:dd:d4:b7:b5:fd:8a:
                    f6:26:12:d9:2e:12:76:9c:b2:84:0b:f6:76:4f:a9:
                    db:ae:4f:73:0d:2b:74:16:21:f2:e0:b3:0b:49:75:
                    18:fe:9a:a3:41:54:b3:76:70:cb:54:31:b1:3c:e2:
                    25:0b:56:f2:79:27:31:b9:04:7e:b4:cf:50:a5:a7:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.20.0/22
                  188.211.28.0/23
                IPv6:
                  2a0a:b080::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202743

    Signature Algorithm: sha256WithRSAEncryption
         2a:61:cc:0f:25:93:61:24:c7:7a:77:14:01:51:c9:71:ca:2d:
         8d:aa:26:b1:c8:05:eb:d5:d4:a0:5e:4a:a4:aa:91:7f:1a:5e:
         63:b5:15:c3:4b:22:60:18:2e:fa:77:a4:25:62:8d:83:2d:43:
         cc:73:1c:b4:35:d4:39:cf:ab:fa:aa:1a:88:4e:af:a5:aa:cc:
         bb:39:fb:fc:e1:0a:2c:5a:38:36:6b:64:e3:a2:02:6d:22:2f:
         5c:35:80:f4:f3:7f:3a:ba:98:e3:7e:23:ed:f2:20:0b:83:ae:
         74:c9:ff:19:b6:b4:e3:47:56:c3:ae:b9:e3:01:ea:7d:81:6f:
         0f:09:c7:9e:27:ec:ca:81:98:9b:ae:a5:ee:17:17:7e:d0:3b:
         09:2f:43:2e:f9:4f:17:79:d5:b8:b5:29:ce:91:85:e4:3e:4d:
         66:6e:1c:ab:e6:2a:73:1d:23:ec:40:9b:81:28:20:6b:6e:d9:
         bf:a6:52:ce:9c:c5:48:54:02:ab:22:83:a9:eb:e4:97:8e:fb:
         5e:f6:45:ae:ab:19:5e:5e:42:ff:d9:ee:6f:3d:fd:ae:2c:d5:
         1f:84:16:37:90:c5:95:03:8c:70:ca:cc:39:02:3a:e0:39:88:
         35:c5:9c:20:b0:54:3c:40:e8:20:9a:f2:c0:3c:d1:03:e6:d0:
         6c:08:e4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----