Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
File:                     fHcuHibmwj9ArWZoyF_pUNoQY_w.cer (raw, json)
Hash identifier:          YoBLxK8E5lpAzJ7sJ6vG1XW1m+W76Usa1tHdvFRXVeA=
Subject key identifier:   7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9DCB13F2960FD2035BBC12DF1A5EE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51301
                          IP: 185.135.188.0/24
                          IP: 2a10:15c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:dc:b1:3f:29:60:fd:20:35:bb:c1:2d:f1:a5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:41:cb:60:e4:46:25:f8:5c:6a:bd:a3:19:
                    36:88:bc:bb:26:6e:f2:27:98:78:1d:c8:2c:02:66:
                    4e:3d:a2:69:f4:c4:f9:1a:e4:63:3a:9d:06:c1:7a:
                    47:1a:9f:00:65:3e:9a:e5:31:48:5f:83:fe:e3:83:
                    46:85:c6:e2:cf:7b:b0:5a:d9:81:49:5b:1d:b5:11:
                    5b:cd:4a:97:b4:ef:89:62:a1:0b:88:50:3e:30:2f:
                    29:bd:b8:27:34:7b:43:81:41:1e:54:df:98:c8:e9:
                    fd:85:bf:9f:5c:c6:31:a3:f7:d4:18:27:1f:18:41:
                    e0:a3:14:4e:72:c8:3a:2d:91:f8:ce:4e:6e:37:e3:
                    36:c8:62:14:6d:79:df:54:6e:67:84:43:d9:39:4e:
                    f5:92:a9:7b:da:7b:29:3f:4e:bb:15:24:a2:44:8e:
                    10:68:41:05:7a:7e:77:0c:5c:17:c8:9d:fa:03:cf:
                    df:bb:4e:9d:bd:3f:13:64:b0:e8:88:5e:a1:6a:9b:
                    9b:0d:51:15:e3:f3:d1:86:09:48:6b:af:3f:66:40:
                    a5:55:2d:e6:ee:65:4e:18:fa:a0:89:47:59:fc:ec:
                    3f:59:cd:a0:fd:9f:86:89:f5:91:6c:49:fa:5b:c4:
                    fe:6b:0b:d2:6e:d3:5e:e1:c0:aa:32:26:9c:a1:d2:
                    97:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.188.0/24
                IPv6:
                  2a10:15c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51301

    Signature Algorithm: sha256WithRSAEncryption
         49:9a:e9:d9:7b:e2:f2:e2:e4:f5:10:96:c5:37:c2:ea:ca:01:
         7b:c1:8e:6a:4a:74:5a:3f:6f:b0:c5:13:2a:4b:c3:02:ab:80:
         e3:80:af:09:f5:2f:57:61:79:f0:ca:17:9c:bf:10:3b:09:6b:
         7f:36:f6:f4:1b:3f:95:69:94:73:78:f8:31:7d:d5:f5:ca:46:
         49:e9:79:1a:7a:b4:31:e7:cb:06:f1:18:65:56:36:a8:e4:16:
         92:dc:10:0c:e5:e3:d8:85:aa:bf:6b:a0:ff:df:b0:e4:48:a2:
         c1:db:31:fd:1b:ac:ea:59:78:88:91:d5:cc:6e:c2:e8:1d:38:
         3f:24:7e:b1:9d:c4:c7:4d:10:92:e6:e2:51:da:dd:2a:33:46:
         5d:43:0c:3c:57:92:3d:e8:35:49:82:c1:88:c5:86:8e:f1:99:
         62:cd:33:a8:6c:e2:39:7c:dc:44:8f:3f:40:63:65:2b:9f:a4:
         7c:e4:bc:23:18:17:6d:54:05:f1:e7:8c:5c:1c:a0:3c:d7:3e:
         63:70:5f:99:60:a5:c7:c9:77:49:8a:66:c1:97:77:b5:18:1b:
         1b:4f:8a:1a:e9:c6:bc:09:87:18:59:e3:fe:9a:bb:f7:a4:9c:
         45:94:fc:96:73:ac:49:d7:81:b0:0d:da:08:1c:a6:9f:e8:e8:
         ad:79:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----