Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
File:                     jTUmuzG54wxJBF9DaMYC7pi-wBo.cer (raw, json)
Hash identifier:          245iKYUzeJ0v4jJmKUC6L+myCDhg9Nx6Rl9cezYSJVA=
Subject key identifier:   8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F79F2B10F1CA103929EB33474B9E5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207277
                          IP: 176.119.146.0/24
                          IP: 2a14:2780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:79:f2:b1:0f:1c:a1:03:92:9e:b3:34:74:b9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:40:f8:6b:c0:c2:cd:9b:47:e0:0b:f9:09:c1:
                    79:fa:5d:d8:dd:51:9a:8d:63:89:de:c3:5d:c1:34:
                    be:5e:78:c5:b2:56:54:e3:2d:b7:d1:9c:28:4f:3e:
                    27:4f:b9:0f:08:f1:01:b5:a6:4c:54:01:17:e1:3b:
                    f1:8c:b9:51:c5:16:c1:92:50:50:07:fc:fe:05:7e:
                    71:da:86:bd:a8:0f:39:d0:1c:f4:05:74:0a:52:58:
                    dd:9b:ac:2e:50:3b:bf:20:36:c5:0c:7b:1d:4a:96:
                    34:b8:97:40:81:5a:97:b5:94:10:50:2e:d4:27:fc:
                    b5:04:fb:77:38:9c:82:9b:41:36:73:7f:2e:ff:f4:
                    96:ca:19:be:77:cc:81:da:77:0f:63:3d:2b:ec:64:
                    36:88:74:fa:54:0f:d3:8b:53:28:cc:16:c6:2a:b6:
                    6f:b5:cf:39:bd:57:c7:6f:2e:ed:51:ba:c7:a1:bc:
                    81:cf:3f:d2:e6:9f:a7:5f:57:4b:c2:30:ce:6d:60:
                    5a:83:a5:8c:36:a6:23:39:50:c5:21:0d:11:d2:e7:
                    11:38:03:92:86:51:2f:0c:c3:df:df:9c:ee:58:f5:
                    1b:a6:c1:5d:e7:46:2d:e3:f3:0a:0a:f0:fb:59:7d:
                    a6:d8:78:07:93:9f:6f:4d:77:b0:1d:3a:f6:26:c0:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.146.0/24
                IPv6:
                  2a14:2780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207277

    Signature Algorithm: sha256WithRSAEncryption
         48:59:11:26:23:d1:dc:2a:e2:7c:a7:67:15:49:c5:53:63:46:
         57:89:6e:70:40:f1:8c:8b:a1:1f:29:9c:53:05:0c:22:f0:7e:
         a6:1a:35:c6:d5:13:55:93:f0:e4:84:7b:b8:23:6a:f5:b6:d3:
         83:84:75:4a:ba:50:66:3e:67:ec:fb:81:88:67:64:60:83:32:
         5d:25:96:2b:5f:fa:31:e9:5a:b6:a5:11:bb:65:3a:89:98:e3:
         24:d9:b5:13:c6:6c:ca:7d:cc:e6:d6:bd:3b:4d:1c:0e:8c:ca:
         77:2c:e2:44:14:01:33:83:ba:43:1f:24:4d:45:0b:7c:56:c0:
         8d:7b:d6:1c:d9:19:0e:cb:6f:d0:ff:ba:81:a3:ac:80:07:2a:
         73:60:a3:46:4c:d3:cd:a6:0a:3a:0f:fb:8e:3e:af:d8:26:17:
         dd:82:6b:3c:55:63:0d:4e:c6:17:32:85:d4:d3:02:ea:97:5d:
         63:de:ba:87:1a:d6:23:1d:7b:02:d3:9d:5d:5e:bf:2a:67:71:
         37:8b:e2:63:f8:5b:8f:81:e1:b3:84:d5:42:16:44:ff:b8:62:
         66:e6:85:95:73:6e:77:5d:3e:46:70:a5:9e:0e:46:3d:5d:af:
         16:7f:9d:4e:6b:f9:e2:51:e1:d8:df:f8:bb:8f:5d:d0:03:40:
         89:b9:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----