Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
File:                     hplEyiVUvOj0uL_HXaWKjwhdX4E.cer (raw, json)
Hash identifier:          BXWv2GoDmU1eZGonphR0qlqsrZnbP5vA9Hh5hPA1EMY=
Subject key identifier:   86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420684D184614B2A65A7B73B3F820046C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34781
                          IP: 85.218.0.0/17
                          IP: 185.64.196.0/22
                          IP: 2a00:f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:4d:18:46:14:b2:a6:5a:7b:73:b3:f8:20:04:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:3e:2e:05:0e:74:90:00:2b:71:97:4c:4e:
                    37:2e:2e:81:70:fd:7c:8c:e2:f5:d3:b1:ac:9e:5f:
                    1f:6c:17:63:e9:08:31:19:27:0f:de:86:f6:a2:0f:
                    33:5f:b8:d2:bf:e0:d7:32:46:65:c6:b7:1c:e6:1e:
                    d7:cc:f1:3e:28:b7:27:ac:ee:40:51:58:81:de:c3:
                    45:5f:bb:ea:0c:bc:08:fa:a0:09:89:f3:6d:4d:62:
                    d8:93:56:de:a4:19:f8:1f:1d:4a:80:10:a3:e0:79:
                    5c:5f:da:4a:f5:4c:64:e0:26:9b:50:9d:38:e3:78:
                    6d:38:44:0d:6e:55:bb:4b:8b:6d:c4:44:e6:25:11:
                    c2:f1:3c:d3:ce:ae:f5:38:d9:84:5f:69:9f:7d:c9:
                    45:54:98:fe:5d:a0:a1:94:d7:fb:44:7b:e8:49:93:
                    d0:b1:fe:d3:59:9f:61:b4:06:1a:ef:3e:23:dd:34:
                    b7:39:81:dd:f4:6b:d4:93:49:72:06:44:dd:4a:93:
                    f9:99:ce:a5:8c:79:85:ca:e6:b2:23:ed:ea:b0:10:
                    3f:58:75:6a:d2:2d:d6:31:3b:4f:79:d3:a6:d8:9c:
                    24:65:f1:18:d6:d2:ae:39:a9:e5:92:38:d9:59:67:
                    d2:b4:a0:f9:36:b1:06:96:e8:5b:17:1c:cc:8f:7f:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.218.0.0/17
                  185.64.196.0/22
                IPv6:
                  2a00:f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34781

    Signature Algorithm: sha256WithRSAEncryption
         23:9c:7b:39:06:12:f2:c0:65:8e:87:65:b8:3d:78:aa:3b:80:
         b9:7b:44:dd:c4:2b:d9:b0:cd:8b:9f:86:4c:bd:4d:e1:17:79:
         d5:c0:14:be:84:ea:00:eb:44:42:bc:db:3a:b4:ee:89:c9:81:
         2c:e3:5a:cf:80:fa:ec:8f:49:91:07:53:15:49:4e:e5:03:07:
         b4:7f:a9:b9:13:fc:07:9f:3b:9e:0b:01:7e:18:5c:b7:d9:c4:
         7c:b5:80:e6:0e:28:3d:6c:b2:bc:a7:5a:f7:64:f2:cd:ad:ad:
         f6:d3:db:15:c5:32:ac:a9:fc:9a:31:f9:fa:92:7d:c8:3b:28:
         8f:71:1b:03:0a:51:5f:8e:c8:54:8b:62:6b:53:5c:28:f1:b4:
         37:a5:c3:36:25:6b:c2:26:ac:74:0b:73:e8:56:3c:58:8b:5f:
         c4:0a:7f:40:08:b3:95:c6:b8:82:a0:e6:a2:b1:a3:44:da:3b:
         54:00:74:fb:34:4b:b5:5d:b2:52:e1:26:33:da:6d:48:37:9a:
         8c:1f:5e:ed:83:07:5e:cc:b3:4d:9e:82:f1:6b:0a:4b:ac:00:
         77:d5:88:0a:43:1f:94:b3:d9:2c:ad:2c:44:43:0a:91:b8:43:
         44:a6:17:7a:b2:22:19:ab:b3:01:5e:d4:2e:99:e8:9f:3b:fc:
         08:f5:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----