Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
File:                     VAavgE71pjb0ZOcajUHo1AGn9pc.cer (raw, json)
Hash identifier:          ZMvczf+Czp1vXZgC+nuQeTonlcZ5y6/eiJO6syQcZBA=
Subject key identifier:   54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC4B5249DF267C3B73D30C723E9D60
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35139
                          IP: 2.58.104.0/22
                          IP: 2a09:e7c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:4b:52:49:df:26:7c:3b:73:d3:0c:72:3e:9d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:e4:c7:12:5e:6b:27:18:d4:c0:b0:1a:ed:
                    81:44:dd:79:35:83:b4:a5:b5:93:75:7f:9b:3f:d7:
                    19:f3:cb:49:7e:19:a1:1f:4a:f3:3c:2d:fa:48:f8:
                    b1:08:19:14:3b:d8:2b:a4:af:79:a1:5b:0a:73:b5:
                    1f:1e:ba:02:93:52:f7:7a:3a:62:ac:0c:ce:aa:eb:
                    42:22:aa:7c:a1:30:e8:63:87:c1:60:2d:7f:7f:67:
                    3c:a3:43:a1:df:cd:c6:f2:23:3e:52:5c:61:ac:28:
                    9f:b6:9f:1c:39:47:22:2b:e0:21:60:06:c0:7d:d4:
                    53:fb:ba:20:a4:b3:ad:60:c1:e0:e2:94:11:bf:1f:
                    94:9d:0e:f9:2f:09:28:15:41:ae:87:b2:40:42:58:
                    54:53:3e:ca:2c:45:5e:a1:02:31:32:fe:80:ec:a2:
                    eb:fc:27:2f:6c:32:f2:f9:0b:6b:f5:40:bd:1b:6b:
                    b6:b3:f2:d3:83:64:fe:7a:31:af:e6:cc:cd:f0:74:
                    23:a7:00:ac:3c:2e:71:5e:3e:c0:f9:90:9a:ef:8d:
                    63:8e:d3:c3:e6:51:d9:2c:37:29:7f:f0:68:44:4e:
                    04:f6:43:26:14:16:17:e7:ce:4c:de:c2:27:3e:03:
                    54:f2:94:c7:ef:5d:9d:8f:00:e8:1f:5b:ec:2d:a3:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.104.0/22
                IPv6:
                  2a09:e7c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35139

    Signature Algorithm: sha256WithRSAEncryption
         77:42:b7:6e:a9:e6:b1:ed:82:af:d8:f6:f0:68:51:70:96:b6:
         89:a6:e6:3b:cf:2a:0a:f0:1f:6c:81:2b:04:99:e8:7e:fc:77:
         21:f6:75:81:12:83:bf:2e:b5:78:6f:0d:df:ec:9f:9d:f1:11:
         7f:f3:0a:6b:38:b9:07:aa:fd:30:d6:97:c5:e7:2c:4a:78:72:
         68:d5:15:3e:5e:50:1b:45:dc:ec:e7:4a:c8:8b:eb:dc:cc:2c:
         2f:35:04:be:94:50:65:61:c4:d0:e5:dd:29:d0:26:90:b3:9f:
         1a:d4:93:25:01:03:c6:ea:06:33:44:9d:14:82:65:63:24:12:
         49:04:e8:7e:e7:cf:c2:82:3a:67:5e:5e:48:34:06:c6:8c:9e:
         00:a3:e6:89:7b:af:87:c3:28:d8:f7:d3:8c:df:44:39:9f:cf:
         b7:c6:2a:61:d6:7e:c3:a5:cc:8d:7d:a5:4c:1d:5d:c6:70:25:
         30:4f:9e:00:07:40:0a:7b:15:c1:07:1a:3e:9f:28:ca:78:1f:
         57:e7:bd:7b:5c:c8:a9:b6:98:36:c2:b4:86:29:27:80:0f:bf:
         16:a5:ac:39:3b:63:32:e1:c4:62:ac:6c:94:36:b2:ca:c2:38:
         06:3c:83:de:7d:a1:42:14:85:f4:14:23:0b:f5:a5:24:a1:36:
         49:64:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----