Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
File:                     eJaox-m6CdLx1EhjZwviE_wMohA.cer (raw, json)
Hash identifier:          UvinRaKdkSDOxK+ONL1lB+Mo3UMuX6THv7Z9ThPU5Ds=
Subject key identifier:   78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019519486AE8F701D6D570F6A44CCD2C5C67
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 13:38:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213719
                          IP: 103.143.173.0/24
                          IP: 2a14:e400::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:19:48:6a:e8:f7:01:d6:d5:70:f6:a4:4c:cd:2c:5c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 18 13:38:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6e:28:cc:51:58:93:e2:b5:05:ae:57:c4:9b:
                    64:bb:82:9c:ae:8f:94:b6:c0:6b:d7:e7:01:cb:86:
                    71:cb:d3:be:0b:fd:56:bf:de:c3:1e:0e:99:ba:fe:
                    12:76:a8:2f:72:a3:e3:4a:fb:ac:6b:46:58:35:3f:
                    e9:d5:68:73:a1:6e:02:27:cf:38:5b:9b:d1:93:5b:
                    e4:64:69:9c:5b:39:0d:54:ae:6c:eb:45:17:be:92:
                    d0:2c:fe:9a:ef:0e:7a:b0:57:84:48:ed:72:b4:3f:
                    b0:3e:65:d7:b9:92:c9:1f:20:5b:3c:24:4b:e5:33:
                    57:57:71:69:73:58:24:68:23:fb:8d:32:e6:b9:03:
                    4c:b3:1d:2c:dd:15:7c:aa:02:fa:38:ec:a2:36:60:
                    83:8a:27:c3:03:39:4c:90:4b:fc:a1:18:0c:4d:93:
                    10:55:e3:12:5e:ac:04:4d:27:1f:e1:8c:bf:09:12:
                    98:20:3f:38:0d:c0:64:07:be:38:9b:70:58:81:b8:
                    ce:b9:63:35:e8:f0:a1:01:28:2e:19:69:11:90:d4:
                    82:af:0b:13:48:b0:60:d0:d9:4a:6f:81:0e:22:47:
                    2c:1b:e9:8f:ed:05:bb:60:c3:a8:4e:2c:5c:92:4f:
                    31:df:87:90:0f:62:27:f8:9d:b2:0c:7c:c8:b7:f1:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.173.0/24
                IPv6:
                  2a14:e400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213719

    Signature Algorithm: sha256WithRSAEncryption
         84:0a:2e:df:67:d6:f6:82:64:1f:2c:60:8e:3d:74:c7:db:8c:
         98:92:c1:43:95:db:8b:81:c2:d7:51:f3:0f:9b:f9:14:db:5e:
         56:97:84:dc:64:16:75:e7:a9:4a:aa:4f:fc:ce:58:62:06:82:
         7e:cc:4c:f6:93:35:d5:33:1a:14:3b:39:39:8d:30:4c:6c:a7:
         cf:c4:f6:f5:eb:5f:0a:a2:46:b3:d4:35:8f:40:dd:1b:82:d0:
         9c:6f:97:fc:37:fb:f5:85:3d:bd:0e:d9:e4:e8:be:c2:47:be:
         27:43:36:fb:0f:73:7b:cf:de:e3:a7:36:bc:05:3a:58:cd:37:
         56:34:bc:40:a9:6e:33:71:81:ac:84:1c:b8:a2:93:b7:b8:40:
         20:fd:4a:75:a1:f5:e9:86:46:3c:1d:36:ae:41:17:37:84:c5:
         72:da:8e:17:45:40:f1:d8:a3:dd:e4:a8:60:e1:48:64:ee:5f:
         31:08:44:d2:3f:35:8a:a3:38:d0:1c:bc:ef:ab:b7:aa:7a:e6:
         14:88:7f:09:72:cd:6a:43:d1:1d:ae:0a:de:05:80:8d:66:d0:
         10:3b:7b:8f:40:bd:38:5f:61:09:61:f9:fe:9d:81:94:0f:c6:
         97:3b:3a:f2:33:e3:ae:71:be:23:8e:3a:9c:96:50:2b:76:32:
         ec:3d:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----