Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
File:                     iNdZL0EZAMBnteeiGaNFq_26pA8.cer (raw, json)
Hash identifier:          lT5GN0lJ5KDEnYTrmVHVDa18yfq6bzXvFrEZeQl5HEU=
Subject key identifier:   88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB0A1F452AE03DD08EB501DD7DA7D4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210772
                          IP: 185.112.156.0/22
                          IP: 2a02:6080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:0a:1f:45:2a:e0:3d:d0:8e:b5:01:dd:7d:a7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:65:5c:20:cd:5f:1d:b2:cb:91:df:e1:d6:
                    5c:1a:7d:1c:d4:b3:72:e2:9a:ca:b4:ee:69:dd:92:
                    05:dc:29:4f:37:4f:78:19:68:96:9e:e8:ce:a1:f2:
                    08:b7:04:a6:9a:94:bf:03:ed:9e:dc:a1:be:16:67:
                    94:c2:e2:c8:2a:1e:3f:29:50:9b:f2:30:82:53:d7:
                    af:42:89:cd:80:f3:97:e6:af:2f:fa:61:2e:bb:80:
                    ef:e6:95:31:0e:e7:58:b2:37:2a:f5:85:81:f6:e5:
                    6e:08:5c:f8:6d:9b:79:b8:03:e4:b3:95:d3:e8:37:
                    16:09:98:ad:21:32:34:65:2c:06:80:89:83:55:2d:
                    2c:50:86:73:11:7e:ee:a1:87:b6:25:dd:9d:e4:51:
                    88:81:91:88:45:76:f5:ba:99:7d:c7:8b:4e:a6:15:
                    3a:ba:d1:c1:09:d6:91:f2:fc:82:f3:12:1c:65:49:
                    86:b0:08:d6:f9:e6:c7:b2:a1:f5:36:0b:01:6c:32:
                    c2:f8:5c:a7:96:01:a2:df:a4:31:97:d5:67:24:12:
                    ee:47:06:f3:bf:06:af:ef:d3:93:24:82:61:b7:22:
                    62:6c:e6:48:40:01:ab:5f:b4:f5:37:86:a6:06:35:
                    6d:13:a5:5b:82:00:b4:3a:a2:0b:48:b0:ab:6e:d3:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.156.0/22
                IPv6:
                  2a02:6080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210772

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:86:45:6e:f4:44:5f:27:94:cc:b4:27:e2:2a:f1:a7:c7:
         9a:fd:3d:25:58:ec:6e:15:14:78:23:1e:79:c0:c2:32:ca:b6:
         31:e8:23:c3:67:94:6c:b9:a8:b6:58:e2:e2:c1:0a:8e:0e:53:
         74:49:02:f4:ce:d1:bf:8f:e1:a1:42:b2:87:f4:8c:52:c3:2c:
         9f:a3:8b:50:1c:fa:24:c2:48:57:e3:7a:21:cc:c9:ae:d1:68:
         72:da:fe:35:db:06:f1:05:d6:ad:53:24:47:e3:8b:07:5c:26:
         c9:a6:cb:52:02:a2:99:05:90:f1:a1:0f:1c:ad:73:55:86:f5:
         99:4a:1f:94:01:8a:c0:80:18:2b:6b:54:05:68:73:c9:6c:35:
         67:30:df:8f:4a:8e:91:9b:a3:5d:76:8d:ad:30:25:35:22:e2:
         db:df:c6:b1:b8:de:60:f6:c1:0e:11:8a:2c:95:1d:f5:a8:a6:
         1d:7a:61:1f:ac:66:e6:af:c5:57:6f:89:d3:2d:05:43:b6:57:
         47:2f:31:b4:e4:b2:9d:26:e1:df:4a:e1:30:e7:62:a3:3c:b3:
         2f:28:a4:83:16:62:4b:c1:0c:db:19:69:5a:33:1a:2b:9e:18:
         ce:e0:c3:dc:21:59:05:e7:4d:74:b3:5c:fc:a8:dd:4e:b1:3c:
         be:2d:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----