Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.cer (raw, json)
Hash identifier:          mJdwM3LKLlKsAdrMsYwf01RJdCqJ6VEhRYUEYxUy7/Q=
Subject key identifier:   82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B30B719715E7BF540EAD622B8A4CD8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208804
                          IP: 45.13.152.0/22
                          IP: 2a0e:f100::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:0b:71:97:15:e7:bf:54:0e:ad:62:2b:8a:4c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:ee:9c:2a:ad:de:52:86:7d:6c:91:27:36:
                    03:bc:0f:80:1e:bc:39:6b:a4:f3:d3:4b:1b:f0:dd:
                    5a:b7:3c:b5:52:6b:d4:b6:fc:30:d3:09:79:a9:3e:
                    97:3f:e8:cf:df:d0:bb:21:47:db:88:60:cf:02:f7:
                    30:25:50:2d:b1:29:cb:3a:44:6a:da:bc:68:9c:6c:
                    77:60:cc:3d:f1:bf:95:54:d3:ed:e5:f6:41:31:18:
                    30:5a:37:38:92:bc:f8:16:f2:7d:9f:b7:86:7a:ad:
                    4f:25:e7:35:bc:94:77:2c:c8:84:09:31:34:13:15:
                    b1:f3:f1:f8:c8:f4:5e:0d:ad:7c:ac:4b:2b:cb:01:
                    3b:51:37:e6:5a:6e:16:54:61:56:f6:c7:94:4c:68:
                    d1:6f:48:d3:4b:c3:d0:fb:5b:d6:ab:46:ba:d1:59:
                    7a:b2:03:41:bd:da:35:10:c1:25:73:51:c6:ca:fe:
                    26:d5:14:bf:cf:97:35:32:c1:f2:31:0c:af:36:4f:
                    50:cd:60:33:44:d5:71:e2:4f:98:6e:89:ad:1c:72:
                    77:cf:2a:dc:a1:72:46:d3:a7:6c:05:0c:4e:1d:ac:
                    f6:87:b1:c1:82:f0:1d:3d:07:02:c9:c5:22:ed:fb:
                    84:d3:98:48:d7:1a:f7:12:1e:45:d0:bc:17:b1:e7:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.152.0/22
                IPv6:
                  2a0e:f100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208804

    Signature Algorithm: sha256WithRSAEncryption
         b0:e5:b4:88:25:ed:b9:7b:f9:bb:a4:1a:6b:cf:52:30:ab:e2:
         27:ab:48:ac:04:8b:af:62:b5:aa:c3:b1:eb:b4:a5:42:11:aa:
         7b:46:6b:c6:91:1e:69:39:79:b8:49:29:55:46:64:64:92:b2:
         c5:32:48:37:38:92:29:58:c4:7f:99:de:e6:e9:2e:5d:81:c3:
         9f:42:92:bb:1e:2d:4b:05:ac:a4:2b:57:fc:b1:8b:b4:10:cb:
         5c:e5:14:59:5e:d3:a8:63:d0:09:de:9b:a3:cd:8c:79:ff:b3:
         15:9a:9a:7d:f7:3e:ea:9f:6f:ca:17:72:cc:7b:28:b2:09:38:
         72:5f:c3:bb:07:99:ff:d4:a0:ad:a8:5e:07:46:4d:6c:e9:79:
         60:df:dd:85:bb:12:3c:b1:b9:ee:ea:66:1f:fc:f0:b9:30:1c:
         b5:f8:18:65:69:9e:e5:dd:b9:15:2c:d9:ad:5b:25:a7:ff:3b:
         7d:a9:47:0f:7c:88:1d:24:16:5b:11:e6:1c:6e:1d:74:e4:9e:
         c4:c1:fe:0c:bb:8c:54:6b:d6:57:ab:15:54:57:40:55:fe:88:
         48:05:5f:38:c1:3f:b8:94:e3:54:20:23:5c:f3:67:7b:44:df:
         f6:33:e9:78:f5:b6:51:a2:a9:67:68:6f:72:39:19:55:9a:f3:
         3a:69:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----