Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
File:                     a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer (raw, json)
Hash identifier:          gfok4RN++8jYDVdfcQAahXsyscS3WyIyMC1gDzCsISE=
Subject key identifier:   6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421443D7E3A7BA0FF352FDC3863981426
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.183.0.0/22
                          IP: 2a0a:fe80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:3d:7e:3a:7b:a0:ff:35:2f:dc:38:63:98:14:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:47:76:2a:07:39:cd:32:7c:db:c6:0c:85:dd:
                    73:32:b0:9d:fa:ed:b9:b4:51:19:ff:57:d5:28:8b:
                    92:69:7b:9a:fd:c4:ef:27:ba:08:03:9f:43:ac:1a:
                    43:91:40:e5:02:84:21:f6:eb:26:03:1a:76:84:77:
                    0d:da:cf:e7:7b:89:3c:61:4c:ba:f7:2b:04:99:9b:
                    76:a4:ec:33:8d:7e:bd:e3:af:81:15:a7:d6:2b:56:
                    2f:92:44:af:7d:b1:c4:ec:48:40:d6:5f:5f:a8:c5:
                    e9:df:e3:5c:87:ea:87:b6:f4:0f:9b:a7:d8:a5:37:
                    eb:db:1b:3c:78:f8:71:db:f8:6f:4a:2c:63:e5:a5:
                    99:19:03:23:74:16:cd:0a:d2:1e:7a:5d:18:ca:07:
                    42:38:da:4b:58:c4:87:c6:99:9d:69:6a:52:67:e0:
                    69:26:ae:69:e1:b3:a0:83:28:42:c1:b8:08:fc:3f:
                    32:e9:0f:cd:fd:29:ae:72:c5:ac:ac:46:48:4e:22:
                    7f:4d:96:6a:2b:dd:d5:91:35:37:6c:70:b3:b9:28:
                    63:1a:b0:48:67:49:13:c9:76:77:2f:dc:c1:f8:72:
                    e0:90:35:de:a9:7f:fe:d5:0c:c7:a2:d6:35:20:5d:
                    05:43:4f:f4:f0:93:e2:19:d2:e6:f3:db:73:8c:e5:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.0.0/22
                IPv6:
                  2a0a:fe80::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:74:24:8c:4b:85:30:3b:42:de:31:8a:4c:a6:f7:1e:ff:f8:
         44:9d:1d:a4:ed:47:96:4c:55:b2:4c:c3:2e:47:c3:7c:c4:7f:
         16:76:b4:c5:b6:ab:8b:9d:b3:e4:41:bb:51:81:b3:ea:15:d4:
         08:c8:b3:2b:79:ab:25:24:5b:a6:d5:e7:2e:5a:4b:37:a0:ed:
         07:96:73:2d:c8:cf:f3:eb:a0:b8:46:83:60:5a:ad:0f:c0:14:
         28:cc:3c:15:5a:47:f5:ed:9a:b7:b1:eb:1c:47:72:91:e9:7c:
         a5:6b:da:1a:4d:8a:81:c8:ad:5d:2b:ce:96:2b:dc:3a:01:db:
         1f:d8:c0:e8:82:fe:d0:d8:41:10:6f:9a:a6:9d:8b:76:96:18:
         c2:36:04:d6:15:5c:0f:00:3b:26:3a:a7:2c:4b:ac:93:a4:bc:
         44:19:74:2f:1a:64:78:33:d4:a5:31:0b:6b:94:ae:39:0a:03:
         90:1c:fe:2a:a1:ba:eb:ba:c0:fc:03:a2:dd:30:63:c0:c9:2e:
         82:42:dd:b6:c8:27:4d:2e:99:88:af:34:35:84:20:7e:ae:36:
         5c:e5:8d:30:2f:71:a5:d1:3f:97:e6:e9:d8:ca:3b:a1:38:7e:
         10:3d:6d:10:14:52:70:4c:40:e8:73:2a:48:73:49:8c:ca:6f:
         8e:3a:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----