Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
File:                     cxwTgoWLDclamtvqRyizH54iwNg.cer (raw, json)
Hash identifier:          aKJrVLxWUd1P+6Gli+em5/7TxlcVKIM0XV0jSDsEVC8=
Subject key identifier:   73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01946F52A09545C49EBF2EC66D7489A43002
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 16 Jan 2025 13:34:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216433
                          IP: 89.39.123.0/24
                          IP: 185.37.237.0/24
                          IP: 2a13:b140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:6f:52:a0:95:45:c4:9e:bf:2e:c6:6d:74:89:a4:30:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 16 13:34:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b8:0b:6f:f6:25:05:b2:39:82:e3:a9:11:06:
                    32:09:d4:25:6a:17:ad:49:0a:7a:11:a4:c3:25:2d:
                    08:c7:77:9d:94:75:a8:75:b0:4d:eb:e9:43:0f:a2:
                    cb:da:2a:13:7c:56:9c:18:87:a4:18:9d:c3:bb:b0:
                    b6:58:61:35:32:ee:db:fa:d9:cf:f3:38:62:fb:ff:
                    d8:a7:21:79:a4:e1:3b:b5:8f:4d:a3:2e:b6:c1:72:
                    6f:f4:85:e9:2b:1b:ef:04:61:b7:cf:a3:8a:c7:13:
                    c8:c1:6f:9f:ed:3b:3a:47:88:ba:dc:16:de:e3:10:
                    3f:90:8e:a8:73:97:10:1e:26:87:6c:bd:bc:c7:f8:
                    9e:3e:f7:d7:97:a3:32:5c:fa:c3:3a:dd:98:ac:56:
                    19:72:94:2d:13:93:08:ab:3f:04:d8:78:75:4b:24:
                    0a:b9:dd:38:e1:81:c5:dd:bf:bb:5d:41:de:d8:4b:
                    e0:c5:7c:b5:c9:28:a9:44:26:28:e6:11:68:ae:04:
                    24:ae:0b:eb:ca:e6:47:f3:eb:40:cf:84:80:f1:c6:
                    67:7b:57:48:2a:4f:4c:50:a4:f6:f0:54:86:89:54:
                    64:dc:a6:b5:75:20:20:68:e1:33:5c:e3:c2:a8:75:
                    e6:5e:9e:00:8e:44:8a:44:e9:2c:6c:a4:ee:98:5f:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.39.123.0/24
                  185.37.237.0/24
                IPv6:
                  2a13:b140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216433

    Signature Algorithm: sha256WithRSAEncryption
         21:c7:68:a4:6a:09:0f:45:87:52:68:e0:f1:40:11:61:cd:d1:
         de:80:12:25:db:40:70:f4:d8:39:ff:36:fe:04:8e:ec:7b:69:
         38:ef:d7:b6:3c:f5:42:27:19:d6:ba:56:7c:80:c8:5b:17:b5:
         3d:fb:d3:51:82:5a:40:02:ee:ef:e4:3a:fd:16:fc:81:88:b9:
         45:96:e1:b4:28:24:59:2f:0c:ea:eb:b0:f1:6c:ff:cc:b4:0f:
         9d:60:d2:dd:49:55:58:44:bb:19:3c:ef:ae:ee:d8:97:fc:ad:
         7c:5a:46:ba:e4:c5:b8:a3:a8:eb:bd:37:c5:23:6f:3e:78:e4:
         72:1a:a6:7f:d9:62:cc:00:77:3a:b9:a9:46:51:a4:75:ed:72:
         9e:62:c4:a4:d6:3d:ba:df:66:47:3d:61:05:da:ef:8e:ed:1e:
         f1:87:d4:8f:d1:b6:e0:bc:ee:ba:6e:b2:c9:34:2b:f3:7e:64:
         fa:61:5c:64:cf:2e:ab:db:e4:ec:dd:30:6a:8e:cb:d2:50:a0:
         a8:42:1a:ab:f5:a7:a7:ed:ee:ef:9c:16:5e:33:09:38:fe:5f:
         ad:20:dd:d4:ad:cf:4c:7a:92:0e:96:a6:90:fa:fe:af:c6:28:
         b8:c9:4f:8a:ec:62:30:e2:a2:7c:37:0e:0d:d8:6b:4e:55:cc:
         76:39:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----