Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
File:                     ibMy1XzhT6sevXRoF91wEGLHSog.cer (raw, json)
Hash identifier:          GREK46g7a7drchwD6pC9w923yS2KVWE+ZwlmnTpPQzg=
Subject key identifier:   89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067FAA19F07DEE9B30999D9645AA8D0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34572
                          IP: 83.173.64.0/18
                          IP: 185.170.148.0/22
                          IP: 2a02:6100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:fa:a1:9f:07:de:e9:b3:09:99:d9:64:5a:a8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=89b332d57ce14fab1ebd746817dd701062c74a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:5c:38:c4:1e:a2:a3:39:c6:d1:55:78:24:
                    9c:5d:a6:47:db:c0:79:be:a7:dc:55:f6:21:f8:0c:
                    e6:dd:28:df:ed:db:47:82:c9:12:93:95:01:35:71:
                    d2:65:5b:7c:42:0c:f7:61:cb:d5:b4:2b:56:7b:38:
                    9c:5b:cc:9b:af:e5:58:b0:24:d1:9d:16:46:95:56:
                    85:96:c8:65:a0:f6:d3:dd:52:68:6e:20:c8:26:06:
                    7b:09:fe:e5:7f:c2:4a:21:e3:a4:6a:28:a8:70:25:
                    2c:70:28:8c:8a:28:a9:1d:0e:e7:3d:cd:d9:4c:e4:
                    62:6a:93:8b:a6:58:f1:04:3f:f0:99:20:88:7b:50:
                    b5:dd:79:6c:5a:4f:c6:45:4e:13:ae:8b:53:71:10:
                    1e:1d:4a:1d:55:9f:34:2a:69:35:9b:7d:aa:c2:d5:
                    29:98:9a:d0:c7:80:10:3b:45:ee:a9:88:c7:4e:1c:
                    99:74:c1:35:1c:f1:0e:07:e4:29:39:be:21:f9:e1:
                    15:25:08:3f:7f:0c:5f:f1:d1:20:31:61:19:52:23:
                    35:5d:d4:a7:a0:17:d2:d1:9b:bd:ad:a9:07:d5:e8:
                    43:ba:fe:8e:8f:f1:be:8d:58:1c:33:14:bb:92:8d:
                    c1:43:0e:66:1a:58:8f:04:e3:28:af:e8:20:ab:88:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.173.64.0/18
                  185.170.148.0/22
                IPv6:
                  2a02:6100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34572

    Signature Algorithm: sha256WithRSAEncryption
         4a:04:bb:90:96:20:d9:78:0b:5e:1a:2a:25:d6:2d:69:80:77:
         2d:a9:d6:fa:bd:9c:f3:c6:bc:e7:6a:65:82:6f:d5:2f:01:91:
         18:9a:dc:91:49:1b:18:5d:20:77:1d:5e:ea:a3:f2:fa:2f:3e:
         ec:d7:c4:21:a3:81:76:65:bd:f6:77:40:62:97:35:da:04:ce:
         4e:bb:ed:43:f8:02:05:7d:c1:e6:26:a9:70:31:10:73:14:12:
         cb:94:28:f5:0c:fe:f5:8a:38:48:e1:ae:6a:bb:66:4c:13:3c:
         9c:ce:fe:74:8c:b3:07:75:d7:c6:4f:64:1b:86:6a:c0:cf:98:
         62:f9:72:a5:00:ac:a9:c0:b2:7e:29:8c:7a:ce:37:ba:55:3c:
         a7:98:6c:1a:78:7e:f1:78:02:5c:71:6f:aa:8e:78:26:7f:d7:
         53:b2:8a:38:50:7c:6e:eb:c2:3f:6c:25:fb:c9:c2:5b:2f:1f:
         15:38:ef:fc:a7:9e:2e:af:50:ae:97:a5:78:bc:2a:53:01:d9:
         02:9c:67:4b:7d:1d:b7:07:31:c8:ef:d3:3b:7c:24:69:72:b3:
         3c:75:da:75:f3:9d:9d:5f:b2:8d:0d:72:11:b9:d4:aa:27:ef:
         64:46:fc:88:e7:8b:e3:92:8b:f2:a1:4f:2c:c4:bb:cd:4a:53:
         d3:00:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----