Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
File:                     gi9abAuVZH8HA1DmUk4SIPukf6M.cer (raw, json)
Hash identifier:          lHg0KsLOgwx/OuRZaLAEkZzvK/Gzgup3Cg9AFP8lTzI=
Subject key identifier:   82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA75D46B612133F1C5FBE11883B43A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209042
                          IP: 5.182.248.0/22
                          IP: 2a0e:a400::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:75:d4:6b:61:21:33:f1:c5:fb:e1:18:83:b4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:5f:9e:27:be:ac:cf:f7:65:d0:8c:91:9e:
                    5a:c6:2a:e3:34:95:2d:20:17:64:3d:8e:2e:cf:cc:
                    01:80:1a:34:55:aa:e5:c8:69:83:79:f3:a0:00:97:
                    42:d7:d7:ac:34:35:b5:4a:35:55:98:9b:60:72:c2:
                    25:74:2c:57:1f:c6:e9:13:c8:f9:26:d5:7e:9c:af:
                    5e:40:a9:a5:b7:81:98:96:ed:d6:13:a1:e7:7c:a9:
                    35:b0:ab:f3:0c:04:85:a6:71:f2:d3:7c:87:72:77:
                    cf:78:d9:56:b9:b3:8f:21:6f:dc:cd:e2:18:98:85:
                    c4:e0:c5:34:69:dd:1c:8f:2f:fe:b2:42:04:a6:4e:
                    26:b8:ce:fd:5b:53:72:de:5f:5a:a5:67:ee:64:91:
                    95:8d:42:d0:d3:8e:5e:7c:90:9c:30:c2:df:c9:b6:
                    a2:66:4e:7d:88:de:9f:6c:0c:b0:49:2f:aa:8e:56:
                    ca:39:d3:7e:0d:eb:c4:4f:67:a5:0e:16:42:58:a7:
                    2f:41:1b:74:39:c3:0e:36:3e:2c:a6:cc:35:d2:40:
                    fc:97:90:98:6e:74:09:e2:c9:9c:04:6c:bc:45:15:
                    01:52:58:f4:7b:74:39:27:a8:f4:ca:1d:fd:8f:d8:
                    71:4b:5a:65:03:65:c8:eb:a3:5f:fd:4e:0f:c9:bf:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.248.0/22
                IPv6:
                  2a0e:a400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209042

    Signature Algorithm: sha256WithRSAEncryption
         1a:08:41:e3:ae:f5:ba:47:3a:ca:0d:2b:08:dc:52:cc:3f:ac:
         21:0b:bb:9d:1a:14:39:e0:31:ba:b0:81:8b:a0:47:04:13:b4:
         1f:b3:0b:98:24:d1:f3:b2:3d:05:af:bf:6d:c2:20:27:9c:93:
         a5:a0:2c:02:44:f0:29:2d:0f:a5:51:ae:0d:22:09:91:80:2c:
         48:ff:2b:d3:57:f1:97:7b:8b:78:cc:d2:7d:f5:3e:c9:4f:89:
         54:27:43:9c:0f:0d:09:81:1f:a9:6b:26:a9:79:94:26:c2:91:
         d3:13:b6:55:88:aa:c4:d2:cb:1b:ee:07:dd:7f:3d:76:09:ce:
         70:8d:ee:e4:e2:34:ac:aa:ef:d5:0b:80:8f:78:f7:ec:b2:df:
         b4:00:15:43:b1:e8:40:4f:80:75:b2:f2:90:86:19:fe:04:47:
         3a:1f:de:30:b7:66:53:d5:6d:89:c0:7e:79:bb:69:a7:25:32:
         85:97:e7:ac:14:cf:f1:bb:9a:79:84:3b:47:5b:78:5c:8c:c4:
         9c:c0:26:9c:c6:00:36:8e:16:29:0a:cb:25:59:c4:25:81:ca:
         cd:50:f6:46:ce:7b:7d:ee:97:ac:d2:14:55:a6:bf:c0:dd:40:
         9f:c9:84:41:5e:53:dd:d1:65:9d:4c:66:02:72:a0:01:88:1b:
         e7:c1:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----