Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
File:                     hkEGVA8wqdzfjvm-cv_vi9inLlw.cer (raw, json)
Hash identifier:          RduTfkZ4mhunOUcPxKQa7/iDRl9MuWaqDpzGfk2vQ8c=
Subject key identifier:   86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C356BC04769AD90E19B3B939D7A32
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42061
                          IP: 195.8.212.0/23
                          IP: 195.60.92.64/26
                          IP: 2001:67c:1d0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:35:6b:c0:47:69:ad:90:e1:9b:3b:93:9d:7a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:13:0c:6e:7c:24:12:91:1d:0b:27:0c:dc:
                    8a:dc:bd:9b:81:ba:1b:bd:84:22:b4:c4:e4:b5:43:
                    27:3a:c1:b6:c7:ac:4e:18:92:e5:fe:b0:6f:7e:d4:
                    97:85:5e:dd:aa:0c:2f:29:d1:c1:05:21:85:55:f3:
                    63:d1:ab:bc:08:a3:f1:87:ad:88:df:bd:08:29:b5:
                    86:8b:43:5d:20:1d:b3:64:bd:5d:02:b0:5c:ca:f1:
                    0a:0f:73:e2:c0:32:8e:fa:66:e2:6b:bc:ba:8e:75:
                    65:79:5d:36:47:5a:bd:72:a3:91:6c:f2:62:19:a3:
                    0b:c1:e3:f8:21:99:1b:9c:ec:ce:29:b7:77:a9:de:
                    18:fb:d1:ee:99:6c:74:06:96:53:bd:1f:88:3e:31:
                    b7:e4:16:2b:8c:06:4c:df:c0:76:52:d5:cb:f6:43:
                    07:0f:04:1c:73:9c:12:4e:5c:2b:9e:96:d8:f4:b5:
                    ce:2f:04:f5:09:aa:7e:ea:81:f9:9e:c3:ac:8b:f1:
                    9a:55:bd:a6:19:f3:4b:3d:eb:24:b5:93:3e:e7:8d:
                    08:6d:d8:25:39:4e:79:42:b2:4f:c5:03:a6:ec:82:
                    aa:bf:98:18:e5:f6:9f:8b:5c:cd:c6:d7:05:98:33:
                    20:7f:10:74:67:4e:b8:a8:64:9d:e9:cf:23:83:46:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.212.0/23
                  195.60.92.64/26
                IPv6:
                  2001:67c:1d0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42061

    Signature Algorithm: sha256WithRSAEncryption
         48:50:b9:54:61:c7:3a:32:82:10:10:35:c9:0d:8c:e1:45:cd:
         c7:12:ca:49:47:ff:de:fc:8c:c8:b4:ed:23:df:bb:20:a3:56:
         1f:31:1d:c9:fc:ee:25:63:29:10:3f:79:06:98:3f:96:a5:68:
         48:30:17:8b:c4:b6:8f:92:54:51:48:4a:96:72:0f:aa:31:af:
         64:ee:95:51:c4:b9:d7:23:de:58:f7:65:a5:47:30:7d:ca:55:
         3e:81:e7:3f:cd:65:57:95:d6:88:86:88:08:7f:82:da:05:14:
         77:d5:18:85:98:82:3d:a6:73:f0:fe:13:9a:2f:e0:ef:60:cd:
         1c:01:26:e1:e0:c0:10:b5:ac:15:db:8e:88:54:92:7a:28:89:
         55:30:7d:cf:a0:3a:bd:b4:44:bd:e8:36:90:1e:92:bf:32:96:
         a1:17:73:07:13:07:18:d4:c3:8d:df:c3:73:6f:a4:fa:d6:a1:
         3f:98:b4:0e:34:0e:02:40:8f:e4:49:8f:e0:fa:de:cb:cc:f9:
         20:22:eb:42:92:d5:82:cc:bd:66:fe:47:3f:02:03:f7:7b:11:
         22:ec:1b:cf:5b:c9:20:ad:e4:1f:4b:86:4b:86:a5:db:3a:d4:
         bd:ca:68:5c:a1:af:ca:a0:a0:a0:0a:99:dd:ff:68:88:b3:b9:
         22:4e:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----