Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
File:                     kniPTrt0HAw2mg_TBZTNAQHcdHY.cer (raw, json)
Hash identifier:          fIL4N6OKq6QQDdlpef0QXXfDr2+2qNOHL57f3PNS2ZQ=
Subject key identifier:   92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A4E7526AAC03152178CC2ABD2E6C8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207151
                          IP: 185.165.64.0/22
                          IP: 2a0b:6400::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:4e:75:26:aa:c0:31:52:17:8c:c2:ab:d2:e6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:dc:03:9d:cf:4e:92:29:2a:74:0a:71:53:
                    11:a6:8b:2a:88:1a:2f:8c:f3:b4:89:0d:d5:fa:8f:
                    5e:97:ac:dc:e3:21:ad:66:b7:03:e7:78:34:88:32:
                    b1:21:ba:ab:af:48:21:dc:a0:85:3b:7c:f6:77:e1:
                    d1:3b:1a:f7:86:d9:a9:28:ba:28:da:00:8c:a6:14:
                    c6:1a:9f:a6:16:1c:ee:36:08:a4:d2:3d:38:2e:6b:
                    af:fc:2a:50:a2:54:2d:a9:8d:91:b2:52:f0:a4:87:
                    24:dc:bc:b2:b5:b7:b0:04:1f:06:aa:5d:f2:93:c8:
                    dd:52:01:52:1a:05:95:b3:4d:90:2b:38:d3:ec:14:
                    36:09:38:ba:e9:03:e9:20:30:e6:78:6d:bd:8c:a2:
                    3c:b1:e2:f9:16:26:39:a0:15:2c:f2:44:09:65:bc:
                    6a:de:ca:81:00:0f:b5:26:7f:a0:cc:4d:b4:38:78:
                    e1:95:13:05:d9:e2:9f:cf:14:94:74:1e:24:e2:c8:
                    7c:e5:35:b4:dd:24:3b:0e:e4:ff:b5:6c:9c:13:27:
                    3a:f5:0f:81:a5:ed:5f:91:09:40:64:58:a2:6e:f7:
                    a4:45:7f:40:51:a7:ab:64:7a:f7:0d:08:83:5f:e2:
                    d8:16:44:fc:c9:8d:1e:b7:93:67:c2:d1:a6:06:89:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.64.0/22
                IPv6:
                  2a0b:6400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207151

    Signature Algorithm: sha256WithRSAEncryption
         2a:12:64:de:27:f9:6d:ee:2e:c8:98:21:fb:ee:6c:68:93:a6:
         fd:80:e3:b7:27:30:ff:81:0c:63:a6:9f:81:59:5e:18:38:3c:
         3d:7a:36:b7:46:e9:57:44:4b:18:08:4c:d6:59:f1:49:3d:5a:
         97:f8:4f:5e:19:79:86:10:55:74:6d:4f:36:ea:02:ef:f9:03:
         48:ab:15:a3:9f:43:e3:f3:28:2f:ed:cd:09:2b:73:f9:78:41:
         ee:6f:c5:72:fc:3b:41:c6:05:7a:07:d3:c8:3c:1b:1e:2a:c7:
         68:33:c6:2c:89:26:73:a8:9b:1a:ac:28:00:64:5a:72:a3:70:
         fd:39:ed:ed:ae:01:38:42:a4:9f:de:81:17:2d:f4:38:6d:84:
         f8:13:61:76:a8:97:93:8c:9a:15:28:d6:b2:aa:3f:c9:19:91:
         85:39:d2:a1:0a:d2:e0:40:a0:c8:0c:5f:f5:5e:a2:69:af:7f:
         09:cf:a7:28:5e:66:9d:9d:79:f5:02:30:35:16:f5:75:95:ef:
         fb:32:2c:10:34:bf:9f:2b:a8:17:13:03:da:9b:20:60:89:b5:
         d1:9b:28:08:ce:15:50:68:ef:59:ff:d9:25:94:05:93:6d:da:
         c2:48:7c:ca:f8:ab:39:b8:c6:86:ee:b6:ae:03:f4:7b:8c:45:
         b3:77:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----