Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
File:                     cnegKqVG3RoKaoLQXZCwkX4VRe0.cer (raw, json)
Hash identifier:          qfK/xFykETVZ7q1BK7yQE3GEpJNjDG13N8qC2kQVqp0=
Subject key identifier:   72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B37500E3FF85A15B919ACA3F69797F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208451
                          IP: 45.132.116.0/22
                          IP: 2a0e:6bc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:75:00:e3:ff:85:a1:5b:91:9a:ca:3f:69:79:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:73:ec:2e:18:95:d5:d3:c8:13:a8:98:66:
                    58:70:48:d4:3e:34:dc:d6:e5:b0:71:5d:d7:bf:65:
                    99:4e:27:9d:ab:12:15:84:0a:25:00:aa:83:e3:f2:
                    ae:77:df:63:7b:88:e1:f5:36:f7:a2:b0:bd:80:bf:
                    4d:e3:c7:38:63:b6:70:6e:ba:9d:fe:fe:ec:08:7a:
                    94:0e:c4:80:e4:bd:b7:08:b9:d8:7e:cd:fc:a5:78:
                    e8:11:ea:b0:4a:6e:36:18:5e:c0:d1:87:f8:28:ca:
                    22:75:2f:31:c4:e7:cd:c0:9b:58:5a:68:ee:9a:a1:
                    e8:18:75:74:89:5a:0b:7f:93:69:f0:11:58:6d:f8:
                    02:78:06:d6:f4:be:9a:c3:c1:7c:e4:c0:58:14:0f:
                    eb:1b:9e:36:05:16:dd:07:ba:8c:52:ca:b8:3e:30:
                    5e:e0:09:e9:1c:e8:cd:7d:12:f1:99:6a:db:4e:de:
                    ac:f9:d6:c5:5a:6f:a6:05:77:cc:88:ce:6d:11:26:
                    d2:60:67:49:5d:5d:09:17:6d:f5:8f:37:45:c6:4b:
                    da:30:4c:71:17:29:16:4a:a1:51:9b:75:b8:44:f2:
                    e5:88:81:08:3f:19:f6:59:36:0f:e7:9d:83:4c:52:
                    5f:0d:a1:08:76:4f:e0:0e:87:ed:25:d9:53:ae:3e:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.116.0/22
                IPv6:
                  2a0e:6bc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208451

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:5a:c0:6b:00:27:ff:02:5a:e4:e2:3e:b6:49:52:9f:e3:
         52:54:24:c4:f7:c1:b5:bd:47:ef:c1:69:e9:20:73:cd:4d:36:
         f9:86:84:82:8e:51:9f:2c:0b:0a:a2:26:a5:45:00:ff:71:26:
         a4:ac:7e:bb:c5:ed:c3:9e:79:f9:d6:33:48:14:97:f2:f6:82:
         f9:b1:8e:f7:bf:a4:f5:31:c0:36:f2:8f:83:7c:93:d1:77:ee:
         6b:71:71:c8:d2:ea:95:ea:5f:d5:ee:65:d1:33:82:e4:2e:3d:
         79:3a:06:e6:68:1c:6a:99:df:7b:0c:42:8c:f0:ac:5f:74:3c:
         33:57:f8:38:38:26:8a:f6:3e:82:48:e5:cf:31:63:f7:ec:eb:
         5b:44:ab:56:54:9c:8a:cf:1c:15:15:da:96:94:ac:af:de:47:
         94:5a:be:1a:07:73:99:3e:34:dc:df:f6:0e:41:7f:1c:f3:b0:
         d0:35:88:1e:ae:d4:f9:b4:b2:39:b6:79:97:33:07:3b:1f:76:
         6f:30:d4:75:33:c1:46:de:06:80:a6:31:a3:96:8a:c7:01:b7:
         f7:2c:2b:5b:f1:b5:2f:03:08:2b:0a:56:2f:6c:d4:f9:bf:49:
         2b:b1:5d:9f:c1:3f:d3:8a:81:f1:6e:6b:58:a0:ce:cb:f9:63:
         42:8a:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----