Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
File:                     XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer (raw, json)
Hash identifier:          iffAlg1XrWi/2wl/AXNs8wupJ9lTxtyJYExfAaXtf9s=
Subject key identifier:   5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143B9935ABB2BB572C59E12AB500FCF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215278
                          IP: 194.147.72.0/24
                          IP: 2001:67c:2d8c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:b9:93:5a:bb:2b:b5:72:c5:9e:12:ab:50:0f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5e4098f206850488b72cdde8387c3181c63f8cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:6d:28:14:b6:18:31:e6:f1:6a:d3:e6:7a:
                    56:81:f5:3d:6f:80:6a:10:72:fc:c4:6b:a5:a3:15:
                    ca:e5:6c:f0:b5:27:1d:f2:f7:da:86:4a:58:d3:06:
                    5e:66:bd:f3:12:1b:c9:6c:01:e4:35:63:df:b9:6d:
                    e5:9a:38:e4:3c:71:0c:20:01:2a:59:32:ea:4f:00:
                    9f:fb:93:ad:5a:80:1b:72:1c:fb:1f:e3:07:3b:76:
                    5f:83:f6:9f:cb:f6:e1:1f:5b:6b:25:b1:a1:37:40:
                    75:ab:1d:be:10:21:ce:e4:28:c3:63:4e:a1:ea:a6:
                    a9:1c:20:ec:f4:10:2f:de:0e:80:af:39:a5:6c:de:
                    17:77:fe:5f:b1:29:e8:b5:f5:2d:24:ed:79:ab:ee:
                    4c:22:41:71:f2:e9:48:37:26:e5:54:72:57:fb:e6:
                    ac:0a:65:db:e0:91:c4:65:2e:1f:cb:2a:cb:07:21:
                    d6:f3:83:85:29:bc:e3:7c:58:38:64:73:b9:21:46:
                    ee:bf:89:97:be:c1:1d:bd:5a:61:fd:bb:51:f8:4d:
                    28:33:c0:2a:b0:c8:10:d1:e7:9e:24:1f:21:e6:df:
                    bb:56:bd:64:88:5f:25:e2:51:9c:ba:76:48:c8:7c:
                    b9:65:2d:e3:72:e6:51:a8:44:eb:8e:4a:5b:4c:8a:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.72.0/24
                IPv6:
                  2001:67c:2d8c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215278

    Signature Algorithm: sha256WithRSAEncryption
         92:5e:88:8c:ad:ca:3a:f2:71:62:04:f7:8f:c3:e4:0c:d9:0a:
         06:49:5b:6c:43:cc:ad:02:98:2c:14:75:36:0f:43:db:b2:c8:
         99:a4:ec:5a:f1:db:05:e9:45:18:5e:96:ca:50:4e:a1:19:fd:
         c6:52:0d:5d:dd:7f:85:c8:85:a2:c2:11:f6:4c:1e:bf:29:04:
         dc:92:fd:31:31:1e:eb:50:3e:1f:42:28:28:de:64:f7:25:b7:
         04:c2:91:87:c3:99:f6:a3:a8:be:ce:30:f4:58:2c:cd:37:da:
         45:56:e9:ba:01:7b:e6:23:94:bc:b4:b2:a9:76:a4:9c:b6:ae:
         7f:e2:bb:0d:fc:88:ab:4d:ae:12:51:23:55:7e:1f:cf:1e:23:
         1c:4b:a9:df:1f:85:f5:3c:e3:a4:33:52:05:33:8b:5d:c7:cf:
         00:f3:b6:03:10:e5:7d:75:a1:70:e9:d8:5e:c4:ee:cd:83:d3:
         5f:04:01:d4:d6:c4:fe:ad:a1:5c:69:09:de:45:d7:51:e0:9a:
         b6:8c:ff:eb:f2:22:49:07:5e:e6:aa:99:09:e8:b4:e9:e0:3c:
         ca:9f:51:f1:5f:4a:44:f2:90:96:f6:29:db:88:86:71:18:c3:
         f5:2a:84:67:6c:51:7d:aa:39:df:a5:bb:29:a0:e3:2a:e8:95:
         b2:00:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----