Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
File:                     l1cFIHWWHp2Qwn0HElpLRGyv15A.cer (raw, json)
Hash identifier:          ngqiB9Xpf4nCxc6+hpqdbBLqkj/W3B22evDM2Dk7By0=
Subject key identifier:   97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747DE735D3715882855F35436E2F60B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49957
                          IP: 91.207.250.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:de:73:5d:37:15:88:28:55:f3:54:36:e2:f6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9757052075961e9d90c27d07125a4b446cafd790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:df:97:71:db:8f:35:05:64:53:6b:be:cf:
                    4b:2d:77:a4:1a:f0:18:2b:ab:80:88:1e:f4:de:14:
                    95:dd:f8:d4:71:69:81:19:2c:41:d9:3a:26:2e:aa:
                    c6:e8:bb:95:bf:76:0e:aa:db:91:ea:c3:c6:a9:ef:
                    f3:dd:67:a9:a1:69:1a:c4:0a:1c:f0:aa:9f:50:c3:
                    02:fc:45:1e:74:df:4c:82:d5:e6:b0:f4:84:9b:ad:
                    79:2f:23:4d:ac:a7:fc:d9:f3:20:a9:75:2c:2a:4e:
                    b1:6b:e3:72:0b:3c:19:8d:cd:d5:af:be:68:0c:31:
                    37:b1:cc:53:96:e5:f4:54:79:72:e0:f2:1d:47:06:
                    1a:b8:66:9c:ae:d7:a2:42:c8:74:72:36:53:c7:21:
                    cf:f9:1a:71:7d:97:91:af:df:20:9a:7d:85:34:d7:
                    a9:b8:ad:f6:70:eb:0c:fe:9f:dd:23:90:54:57:05:
                    db:4d:d1:24:6e:e1:35:cf:a7:a7:2f:67:1c:ff:77:
                    16:33:33:26:c1:47:90:9b:16:90:5e:6d:81:c1:fb:
                    a7:9c:27:08:72:85:9b:b5:c5:f4:d1:02:b2:b6:eb:
                    33:bb:f4:7e:cd:2f:18:de:46:e7:63:81:7a:41:fc:
                    ba:23:2c:a2:00:f6:31:12:0c:2e:63:1d:df:38:6b:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.207.250.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49957

    Signature Algorithm: sha256WithRSAEncryption
         73:09:d4:0a:b4:aa:ab:3a:c0:63:92:01:e4:71:d7:a3:92:7f:
         e5:06:4d:b8:9c:cc:60:4d:6a:45:fc:ac:c2:0c:d5:dc:4c:62:
         af:2b:b5:0a:28:4e:c5:98:de:f1:15:c0:dc:b9:df:8f:df:7f:
         0a:bd:e8:18:1b:08:24:e6:d4:26:28:a8:7d:67:28:2b:d1:0c:
         b5:13:a2:0f:41:a0:f0:35:a5:6f:a8:1c:36:5d:e8:81:26:17:
         e4:0c:6b:9e:f3:36:e1:4b:30:92:3a:e4:d9:64:22:9f:d3:ac:
         c5:9c:95:75:09:fa:65:b6:3c:73:98:18:e9:92:84:9c:d5:0a:
         6d:62:5d:1e:c2:f0:2c:6c:73:6e:48:62:4c:db:43:92:d8:47:
         7e:12:19:75:e9:61:cd:04:4e:15:fd:62:97:7d:d0:41:10:8a:
         d9:48:c3:f6:ad:c4:ca:24:a8:00:1b:93:b0:dd:6a:dd:bc:b0:
         5f:f2:7a:48:8e:f7:62:35:a4:c1:f1:4b:bc:6b:67:b7:5a:56:
         17:69:63:c4:15:2e:74:e6:10:88:19:9e:42:02:cf:d9:d0:fc:
         3e:f8:1f:d7:9d:8d:56:a9:ee:8d:24:7a:f1:e2:c6:4a:27:fb:
         df:7c:ba:40:8d:f0:c8:4e:7a:bd:1e:6c:21:c8:77:14:f1:d2:
         90:0a:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----