Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
File:                     cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer (raw, json)
Hash identifier:          CicqTZ43iEQd2UKOWEnBv936ncQ9t2rApZRBv4p0M/s=
Subject key identifier:   70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747B709D688B0CD2D84972128C8ADD0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43815
                          IP: 193.30.244.0/24
                          IP: 2001:678:8b0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:b7:09:d6:88:b0:cd:2d:84:97:21:28:c8:ad:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:fe:1f:a4:79:1e:04:4f:05:3a:bc:0d:0a:
                    94:fc:a5:b8:44:49:57:b9:0f:38:45:50:86:0b:6f:
                    68:0c:43:ea:9c:5b:d1:ed:86:9f:56:82:ab:84:69:
                    8e:5b:05:c9:40:20:dc:f8:1d:8b:1c:69:08:41:ae:
                    ae:5c:4e:68:7d:e4:c3:2b:f0:b2:7c:20:18:ea:78:
                    23:6b:de:3e:08:c2:d7:bc:8d:99:8d:db:cd:84:27:
                    6f:94:65:ca:37:b5:4c:0a:05:f1:4d:6d:82:ba:e8:
                    03:ff:3b:9a:3e:7c:d1:40:ed:01:e4:4c:89:79:5c:
                    ae:de:ce:09:e6:1a:2a:cb:ef:e5:43:6a:8c:3e:a6:
                    2a:16:9f:2b:52:1d:45:5b:a9:ea:c5:a0:c8:69:db:
                    5d:25:70:cf:d7:46:36:da:ca:06:72:eb:7a:83:59:
                    6e:c9:c1:4c:36:70:4c:e8:a7:70:e1:64:6c:61:2e:
                    09:6d:45:7a:0a:26:34:46:f3:5e:1e:08:ca:eb:2c:
                    a4:e5:3f:71:68:12:e5:11:b8:a5:02:9e:79:9a:80:
                    cc:dc:94:9f:76:c1:8a:69:cc:8e:23:ba:9b:47:18:
                    52:14:4a:f2:6b:eb:dc:95:06:b5:1b:11:6e:bf:71:
                    10:a9:8b:ad:af:09:18:03:72:0b:22:30:16:a9:ba:
                    15:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.244.0/24
                IPv6:
                  2001:678:8b0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43815

    Signature Algorithm: sha256WithRSAEncryption
         90:20:e3:86:10:e7:d9:ba:3a:e7:d9:a7:52:80:91:66:61:aa:
         9f:ad:6c:a5:c0:54:1f:da:a5:fb:40:d9:39:27:4b:dd:2e:f1:
         d0:da:f8:61:15:4d:13:07:a9:c3:86:a7:31:da:e7:0c:54:85:
         08:90:71:4a:8d:8b:b5:98:c7:0b:8a:a3:ee:86:e1:8f:9f:57:
         c1:bb:1d:64:e5:4b:77:ab:39:af:b2:75:3d:2c:b0:7d:23:39:
         17:84:9b:1b:01:5b:cc:d8:44:38:5e:97:d6:ee:1c:9e:78:1c:
         1c:66:8d:d3:5e:e3:06:a4:fb:d5:7e:b5:1d:1d:c2:45:f7:c7:
         c6:a5:e5:12:c3:63:be:39:08:29:58:d9:c7:46:3f:e4:d8:a1:
         8e:25:0b:76:b1:d1:97:fa:f3:cf:a0:e6:f8:ae:3f:58:52:e8:
         13:37:7b:a6:16:64:26:de:f7:3a:78:e1:cb:15:24:a9:86:1d:
         ff:59:43:a6:ed:fa:b4:86:72:48:8e:c1:08:74:98:3f:99:58:
         49:90:bc:55:67:13:10:93:3b:f4:df:a3:19:b7:7b:ef:0f:bd:
         2d:81:52:37:3f:1b:1a:13:6a:57:4a:a4:f8:00:65:1c:33:df:
         d6:27:6f:a3:62:b9:29:95:0e:fc:54:c4:3d:9d:38:ad:9e:fc:
         5a:ea:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----