Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
File:                     ifnCFo0tgt39inBjfUQBivMLH5c.cer (raw, json)
Hash identifier:          phND5oJvX9qRgzSm/w79EVYDTHY/Exs0QEhKnK+xAsw=
Subject key identifier:   89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195F04449BFD3D1299D3DAFA6CE4D2E8432
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 01 Apr 2025 07:32:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.1.186.0/23
                          IP: 194.4.8.0/23
                          IP: 2a00:f060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f0:44:49:bf:d3:d1:29:9d:3d:af:a6:ce:4d:2e:84:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  1 07:32:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:b3:74:3d:52:fc:0c:9a:94:29:b7:2e:ce:
                    2d:fa:9d:1b:b2:96:6d:24:28:49:31:6e:6f:b7:6c:
                    3c:9c:b5:01:ec:cc:1c:ab:99:df:0c:77:d5:51:58:
                    75:e2:20:e9:c1:67:c7:74:c3:e3:19:88:e2:76:c3:
                    d3:2a:4d:c6:19:d9:5e:f4:61:47:58:6e:5f:0c:d4:
                    d9:a0:58:9a:a6:28:96:14:33:bb:85:4e:c6:8e:9f:
                    c3:1b:3c:5f:de:50:59:32:a1:4b:7a:d9:3e:3b:fa:
                    f2:df:cc:7d:ed:02:7c:5c:21:29:bc:c3:7e:32:f6:
                    95:d7:99:74:21:11:07:2d:94:cd:46:d8:d9:e9:89:
                    1e:df:1b:82:03:19:ec:3c:f9:5d:af:c0:bc:87:d8:
                    59:e4:c8:40:0c:11:84:d8:76:82:c6:bf:05:97:90:
                    c6:31:3f:f4:7a:c1:08:95:b3:13:1f:54:7d:23:5a:
                    c7:8c:79:14:f7:9c:e1:f2:d4:14:ea:65:d9:48:52:
                    a5:00:e5:82:0e:73:78:a2:cb:5a:57:d9:13:7e:4f:
                    78:29:1b:40:97:b0:77:de:7b:1d:3e:21:07:b4:f9:
                    1d:3a:83:4c:1b:5b:38:1d:59:c2:13:54:5b:c7:10:
                    41:5f:aa:b7:28:5b:b0:60:b8:40:a3:fe:17:a4:1c:
                    2f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.1.186.0/23
                  194.4.8.0/23
                IPv6:
                  2a00:f060::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:f7:00:59:d0:6e:56:22:bf:ba:ea:7a:b4:32:83:a2:64:fe:
         f2:7a:fd:11:5e:60:fe:f0:7a:6d:ca:c9:2b:aa:9d:f0:80:6f:
         4d:33:a7:fe:64:96:0b:92:9f:a1:70:a5:6a:0c:a2:5c:b0:50:
         29:74:fd:c3:51:57:1e:fc:06:98:0c:2a:c4:30:2e:4e:7c:51:
         22:9e:36:57:5c:c9:3f:58:4c:44:61:9c:76:68:d3:e6:f8:aa:
         c3:a4:f0:4c:b8:ec:4c:0e:d3:7c:63:c3:0d:5e:84:b6:e4:46:
         18:30:ed:a7:b1:ea:77:d8:f1:79:a3:d7:24:c2:33:01:59:81:
         66:ce:2d:fa:9b:55:1f:3c:ff:11:07:4c:96:54:24:30:c3:0c:
         f5:90:4b:b7:65:70:9c:1f:e4:13:6f:22:c1:e6:78:88:b7:eb:
         67:91:93:f4:ed:2c:44:d4:be:d6:d5:6a:6a:ae:04:69:3a:5f:
         95:e6:ef:4a:f7:49:b8:e7:e8:01:7b:c5:f8:03:ba:8a:b9:e6:
         91:09:04:07:f2:88:87:55:fc:07:c4:39:f4:83:1c:72:8a:58:
         63:e8:73:03:cf:b4:cb:89:d6:a1:5a:a3:86:74:2e:ac:fc:5a:
         fe:63:a3:75:66:4c:76:4f:19:6f:2d:ab:21:d1:09:8c:95:ab:
         2a:18:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----