Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
File:                     jCgv8-x8uBt45iinNRdkjWIpyrc.cer (raw, json)
Hash identifier:          yviuKPUbJA1keV+FQ49iLOHZWvLKXTkuvZblfVYenmQ=
Subject key identifier:   8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195B38D7328176096E5CD07B47133080E22
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Mar 2025 12:35:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.180.96.0/22
                          IP: 195.137.169.0/24
                          IP: 2a0b:6d80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b3:8d:73:28:17:60:96:e5:cd:07:b4:71:33:08:0e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 20 12:35:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7a:a7:6e:d4:e8:4d:9e:85:69:d2:10:88:1e:
                    af:c6:48:4b:5d:20:f9:3a:32:63:f8:3c:4f:71:ee:
                    e3:0f:b4:c4:88:08:51:ff:f0:fb:ce:58:89:6a:40:
                    e0:f8:9f:27:55:c8:7d:8e:6f:5c:f9:d6:1f:41:e0:
                    b3:ac:8f:29:c8:4d:d9:37:ff:f2:c1:8a:16:06:8c:
                    7a:33:37:48:55:b4:c2:7c:93:ad:cd:8c:c0:83:90:
                    1d:15:79:09:cf:d4:50:4b:3c:60:7e:01:53:a1:f3:
                    2e:cd:b6:a1:6c:87:6d:dd:01:2b:a5:5f:39:48:1c:
                    c6:c6:a3:5c:84:bd:d3:27:71:af:fb:07:df:7e:41:
                    b3:e2:32:1e:43:4e:c6:f1:fd:61:d5:d6:fd:23:30:
                    58:47:7b:81:ae:da:ae:ee:db:43:ea:75:75:f1:e3:
                    9b:57:a5:e3:da:d8:d2:13:52:4c:1f:06:9f:09:83:
                    5b:33:16:ee:a0:b5:e8:40:a2:89:56:1c:77:4e:d6:
                    e9:9f:d6:ad:1e:b0:9d:b8:4a:04:9b:77:e8:79:91:
                    83:0c:ef:cd:9e:b7:56:5a:b7:50:eb:29:4c:f0:09:
                    46:25:66:93:73:c0:f9:b4:b3:19:bc:de:c1:b8:ee:
                    8a:41:69:8c:11:81:98:4a:47:07:ee:47:7c:61:5e:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.96.0/22
                  195.137.169.0/24
                IPv6:
                  2a0b:6d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         08:78:51:fd:d1:ab:a0:48:3c:cf:2e:bc:ea:4d:19:a6:64:66:
         32:c9:b2:7f:72:ff:b4:8b:45:6c:13:b1:2e:1e:f0:d4:9e:73:
         98:20:e0:45:44:77:52:2a:54:d1:fd:d6:3e:c9:3e:d9:f4:7b:
         2c:4c:d8:e4:fa:39:7d:f6:9c:c0:b4:5d:b6:94:e3:d1:2a:fa:
         3d:9e:7f:ff:81:c1:db:3e:07:c6:cc:00:2b:d9:73:1f:67:08:
         01:25:11:34:e4:8c:df:02:64:0f:b0:27:31:a8:6d:a8:42:f6:
         dd:22:72:ac:dd:10:fa:72:d2:4d:22:2e:3f:5e:85:bb:f1:d1:
         d7:dc:e2:5f:3e:0d:43:85:20:93:3f:79:31:03:c4:ba:ec:75:
         9b:6f:15:c1:49:0d:7c:76:08:29:f3:95:18:c3:8c:f2:5a:f6:
         84:f6:ec:b9:a1:8c:c8:ea:b4:db:be:54:a1:3c:be:f1:ce:93:
         bf:84:a4:d6:d9:0e:b3:ba:59:e7:0d:94:b9:be:4a:43:c4:03:
         c9:0e:ec:ec:6d:48:72:70:f0:c0:4b:58:ab:35:cd:e7:43:a5:
         78:0c:0d:4e:fe:80:cc:74:9a:8e:3e:ee:42:67:47:38:9e:cb:
         de:bb:f1:2e:94:6f:d3:9d:f3:0a:8e:9c:c6:7f:26:94:47:a2:
         b4:30:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----