Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
File:                     frRWWjLbPJyLiw97TBG9EVTiDek.cer (raw, json)
Hash identifier:          QB6XV50aHaWucf3z+VoslPGq1yW2k+tl2MdPIGzyiFw=
Subject key identifier:   7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3E66872A83E5A9BED24A83ABE6D54
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 52122
                          IP: 46.255.184.0/21
                          IP: 185.4.184.0/22
                          IP: 2a01:9140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:e6:68:72:a8:3e:5a:9b:ed:24:a8:3a:be:6d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:eb:6d:a6:78:17:1f:b1:f7:77:c2:97:75:
                    0a:26:b3:aa:5c:2d:48:c0:5e:2e:47:e7:14:f0:bf:
                    c1:3d:a3:50:f4:21:6f:5d:cc:e8:eb:ea:9d:29:a5:
                    ae:45:ef:30:db:81:66:65:3a:02:b9:3c:c1:22:a1:
                    a7:be:07:3d:c4:43:ef:38:be:61:25:03:7a:4b:8e:
                    9f:8a:75:f6:67:34:aa:5c:00:66:2d:4e:29:76:8e:
                    83:64:e5:46:41:35:22:58:1c:6c:40:21:aa:b8:72:
                    c6:36:ea:5f:72:ca:49:35:6f:c5:55:90:54:16:99:
                    8c:b2:5b:53:fc:d4:53:5b:f7:f9:f2:fd:64:65:5c:
                    d6:4e:ca:7c:08:56:74:70:cb:87:bc:e3:7a:2a:d4:
                    90:35:b3:da:3c:9d:c5:11:ee:fb:5e:26:39:30:89:
                    0d:90:9b:1e:01:c1:e2:fd:e9:e6:3c:3e:32:c5:c7:
                    fb:83:ea:da:8c:77:15:9f:0b:35:b7:bb:b0:9a:c9:
                    99:d0:cb:e0:08:ec:a6:30:6c:82:2a:62:5c:97:94:
                    8d:f7:c8:ef:ff:c7:b6:0b:ad:00:53:bc:e9:24:70:
                    fd:da:12:af:a4:de:34:33:82:be:ea:42:a0:8b:ec:
                    26:cc:7f:18:52:dc:c1:ae:f8:64:8c:77:1b:c8:db:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.255.184.0/21
                  185.4.184.0/22
                IPv6:
                  2a01:9140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52122

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:a2:a4:7d:32:89:54:8e:eb:51:29:b0:4e:b3:5b:e5:34:
         d7:23:0a:d3:f7:89:8b:2b:b1:33:5d:05:1f:1b:2c:a9:98:52:
         e3:0a:31:72:1a:d0:4d:0c:56:57:00:91:05:ca:be:3e:74:e4:
         9e:81:2f:5a:e1:38:58:ac:4c:99:d6:14:46:8d:8b:64:b5:e7:
         90:a4:07:ee:96:28:1b:f8:57:9a:ad:73:c7:8b:a3:e9:d2:57:
         70:00:7a:6d:d7:2d:a2:2e:99:9e:02:52:df:e1:5d:87:92:f0:
         23:80:b4:de:b6:52:e7:3d:6d:a8:8d:b6:db:38:21:72:c5:6a:
         da:87:f0:5f:92:53:25:87:98:f6:27:36:59:27:69:9e:15:ff:
         99:ab:d3:79:5b:0c:47:5f:ed:cf:6a:80:cf:88:85:0f:30:40:
         d7:0f:f7:dd:9e:ff:94:da:3e:07:91:2b:9c:fe:81:9a:1d:e9:
         bb:c4:e3:f5:75:5d:7f:26:f9:69:16:dc:75:f6:98:0c:fe:d2:
         8e:f1:4d:a2:07:ad:8f:7a:fe:08:03:05:1d:ca:d9:cd:5b:5c:
         16:16:08:e7:8c:dd:09:74:b0:03:b5:2d:36:d2:35:2c:10:93:
         02:15:b5:7e:85:82:3a:b0:4b:12:6a:8f:43:fe:29:84:c4:a4:
         0c:da:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----