Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
File:                     VAPl-EBdYIW430v84d2bs-eMIZk.cer (raw, json)
Hash identifier:          HH7SlpvLomKeTgiW3ELYKzxuA1q+8KJePIQwGBczXxE=
Subject key identifier:   54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961062496266E0390B8EB2FEFDE5F277D8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 07 Apr 2025 13:13:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213023
                          IP: 185.189.180.0/23
                          IP: 2a0b:f380::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:62:49:62:66:e0:39:0b:8e:b2:fe:fd:e5:f2:77:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  7 13:13:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ac:c0:f8:1a:58:da:f8:99:72:e4:ea:7a:09:
                    e7:22:ee:68:74:92:35:74:40:34:c2:ed:46:03:35:
                    c1:2c:c8:2d:0a:09:92:43:cd:4c:ac:49:c9:5f:d4:
                    62:c2:46:32:b6:07:35:ad:c5:e2:65:87:8c:ff:c4:
                    31:d8:81:13:22:e1:a9:27:68:be:fb:96:b1:47:0c:
                    64:b3:b3:04:61:ab:00:14:54:31:4e:0e:3b:af:08:
                    23:3b:22:6c:ef:21:01:be:cb:d9:77:de:5d:7c:f6:
                    d5:ee:dd:56:c8:d7:f8:f0:a4:a1:38:86:37:8e:02:
                    71:44:59:19:9d:31:1e:86:72:9f:58:a1:1e:aa:6a:
                    29:17:8e:81:a5:9a:3f:e7:7a:4c:8a:31:60:51:76:
                    92:d4:bb:24:e8:f1:44:b7:8b:e6:ee:67:6b:87:19:
                    ff:6c:8a:67:76:c5:f6:3c:0c:49:03:dc:50:ce:50:
                    e5:55:d4:a2:77:cd:2f:e8:03:64:d8:e4:a8:40:9b:
                    9a:38:3d:16:17:c1:30:54:37:9f:db:d1:b5:ec:ee:
                    ff:8d:ce:d1:ee:e0:87:3a:a7:67:e0:ef:81:75:43:
                    52:38:12:34:7c:47:2d:c8:b7:75:33:f3:37:83:d8:
                    ff:2d:fe:61:76:e6:2c:3a:e4:00:cb:f6:44:57:56:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.180.0/23
                IPv6:
                  2a0b:f380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213023

    Signature Algorithm: sha256WithRSAEncryption
         4b:63:6b:83:a0:01:a5:81:c2:9a:2d:4f:e4:54:04:e8:f2:2c:
         a2:1c:d8:59:f4:80:ca:ce:55:10:82:a4:2c:56:34:b5:8c:7a:
         6b:5b:71:92:e4:dd:6f:e7:c6:f7:3b:3c:d0:09:23:6f:da:2c:
         99:5f:ed:06:b0:54:45:ee:86:d9:56:7f:df:a7:89:ab:ae:7c:
         ed:56:23:db:ec:7f:d3:50:af:e6:1d:64:10:60:0f:7a:c4:08:
         5e:7d:2f:8d:e1:e2:a7:70:78:a9:13:49:6f:b5:ce:7e:89:d4:
         5c:48:3c:c5:cd:b8:b5:4e:1f:d7:cb:fe:b4:2d:da:95:cf:e2:
         60:a2:26:08:d1:23:d0:49:ae:ec:6d:d4:08:a1:df:79:a4:83:
         0b:ac:26:6a:63:10:59:e4:40:f8:e3:fe:0e:eb:75:96:1d:71:
         88:43:95:1d:97:1f:48:05:1d:5f:de:1e:06:7f:97:5c:85:ca:
         63:df:7d:33:55:77:73:a6:6d:19:02:5f:2d:8a:c0:e4:ac:66:
         5c:88:21:bd:23:85:16:e0:69:87:4f:a8:96:4e:8a:42:de:90:
         0b:10:b1:5c:0d:b5:45:2e:66:02:d0:39:88:85:19:46:03:6a:
         ff:06:b6:56:f6:22:f4:f7:25:4e:f7:bb:41:fd:8e:89:9c:9b:
         f4:27:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----