Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
File:                     iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer (raw, json)
Hash identifier:          1/ISkgYCjBqfDs/hz0Sob/xT1iXY0TQYogq73f7sNOg=
Subject key identifier:   88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194FF8DD786A4E5BBC1E5BB2582E1C232BC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 13 Feb 2025 13:44:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60895
                          IP: 185.23.112.0/22
                          IP: 2a00:6d20::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ff:8d:d7:86:a4:e5:bb:c1:e5:bb:25:82:e1:c2:32:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 13 13:44:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=88a8d325f97b03713342682fc408d53368740e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:f6:a7:c0:28:06:fd:b0:a2:3b:44:b7:98:
                    ad:f1:82:c7:4f:d4:61:89:a7:ee:4e:7b:e5:f6:ed:
                    56:cb:00:d7:54:8a:34:af:63:47:f8:97:63:52:4f:
                    5d:c0:3d:bf:4d:84:37:94:81:ce:6a:7f:e0:66:66:
                    d9:55:2f:fe:cb:41:9b:87:10:2c:e9:73:bf:1f:f8:
                    ab:62:e6:dc:7d:ad:27:3b:49:ea:27:bd:7f:61:59:
                    34:13:a9:a5:75:1d:e6:2f:f5:c7:70:3c:08:54:2f:
                    75:ce:d2:ad:cc:7d:4b:e8:db:aa:12:c6:8e:4f:dc:
                    28:62:01:f2:b1:ea:e4:fb:7a:91:f9:c3:b4:3b:f4:
                    87:f2:94:16:41:2a:b0:fa:c7:d6:d3:cb:a1:15:9e:
                    0d:ab:c8:e3:37:82:c7:3d:a0:a7:71:30:1c:8d:d8:
                    ae:17:f8:94:35:10:29:22:89:a8:d0:cb:88:e3:91:
                    e2:0b:8a:c0:97:96:60:f3:a3:19:05:53:29:fd:0f:
                    85:2c:7b:99:08:8e:42:28:3a:5a:7f:a9:62:df:8b:
                    22:02:ce:80:13:89:45:ec:c6:39:89:86:ec:d7:54:
                    c0:02:a5:65:20:fc:4d:ed:96:11:b9:a5:56:ac:cc:
                    93:0a:58:e5:43:0b:f4:7b:a5:0f:05:4a:21:94:1d:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.112.0/22
                IPv6:
                  2a00:6d20::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60895

    Signature Algorithm: sha256WithRSAEncryption
         82:54:b1:1d:77:3c:de:dc:80:f2:cf:15:f4:5a:3a:35:50:23:
         c6:1f:d3:fc:ba:75:c2:ea:51:d2:56:58:b2:ec:8d:09:8b:f7:
         ad:cb:5d:ed:c4:92:2f:a6:cf:dd:2f:cb:77:39:00:bf:c3:4b:
         85:c6:19:6a:fb:a4:73:73:b6:6c:95:7b:c6:51:f1:d7:65:f7:
         bc:36:24:85:fd:5d:98:34:2b:51:85:8e:dc:57:6f:30:07:8e:
         60:55:65:1c:3a:19:cb:70:c3:4b:b7:e6:69:1d:1f:86:2e:73:
         4b:58:e5:95:6d:10:d5:c5:08:83:43:34:0d:d3:07:37:a3:1e:
         2d:a4:ac:a5:ee:a3:9b:70:b8:18:fe:31:7f:0b:ae:8e:58:5f:
         bd:84:7d:26:62:b1:af:85:be:ff:2d:76:5d:c9:84:01:e3:4b:
         36:a3:be:ed:cd:23:82:6d:de:ed:9e:d0:5e:65:18:df:36:f6:
         c4:37:fc:f1:a4:6a:67:2e:ad:bc:97:63:54:74:81:aa:5d:eb:
         80:d2:c3:41:89:6b:e5:a2:60:97:a6:e8:f3:23:7f:29:7d:ef:
         ec:9a:b2:78:7b:fb:01:d8:f6:bf:52:a7:8f:f0:af:9f:59:49:
         f9:54:cf:0b:c3:b0:3a:0b:e1:c2:2c:3a:db:be:23:a4:4c:2d:
         d2:2f:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----