Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
File:                     lOb0czAsajyJ33uJMsVryEHLX6w.cer (raw, json)
Hash identifier:          WlGuic9dRsfNnwO9doXUYNRllYjFXdAoGQ/qVe4P22s=
Subject key identifier:   94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1DA92F6D24BC0353421881F838D29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203170
                          IP: 185.77.188.0/22
                          IP: 2a05:5f00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:da:92:f6:d2:4b:c0:35:34:21:88:1f:83:8d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:1a:9b:2e:d5:51:74:c6:45:8b:73:84:a1:
                    05:32:9f:bb:7e:eb:d8:69:39:9c:64:c6:b3:91:52:
                    eb:fe:e6:ad:01:0d:d2:ee:c7:a5:e1:2f:47:65:de:
                    b1:e5:0f:e4:5a:ea:b6:dc:83:9a:99:f3:17:4e:37:
                    2c:ee:b8:65:9c:c9:ba:e3:53:5c:63:02:3d:b7:f3:
                    f6:29:da:92:f1:80:dc:13:10:ea:97:64:1b:ca:66:
                    7e:51:69:a5:fb:90:47:e3:69:4e:aa:1b:f3:d6:02:
                    c8:42:df:75:b0:68:1c:8f:b2:81:1d:f6:ac:5c:f0:
                    b9:44:4c:fa:40:47:15:ec:e2:96:dd:ad:2b:8f:cc:
                    1d:39:2b:4e:7d:02:39:2e:1a:e7:e2:c6:f5:fd:d4:
                    1d:e4:1e:47:38:2b:db:7d:e3:10:27:78:92:c7:f4:
                    c4:40:2a:2b:e7:8f:de:ba:12:fb:b9:92:3a:f9:d7:
                    b1:13:68:7c:0d:3c:9a:d3:12:a2:16:30:ac:ce:95:
                    53:ad:b0:21:d2:cc:b5:58:05:51:6b:40:04:4e:89:
                    23:f7:6c:63:9c:ab:6a:04:a6:5e:48:af:1c:18:8a:
                    ec:28:f9:3d:dd:63:25:fb:b1:51:68:e4:91:40:64:
                    c5:d6:30:f5:9b:95:dd:af:de:bb:95:e5:1e:b2:fc:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.188.0/22
                IPv6:
                  2a05:5f00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203170

    Signature Algorithm: sha256WithRSAEncryption
         27:53:5e:29:c8:a2:78:bf:6a:c1:d7:ee:8a:24:d8:f8:3f:be:
         7e:d9:5a:ff:a0:5e:9b:ae:45:ec:86:f2:46:e2:a2:fe:80:25:
         e8:34:7a:e7:c6:8e:65:3a:32:63:ff:ea:b1:3f:00:43:91:ca:
         74:39:13:10:b1:19:9e:74:7e:38:66:cd:88:3f:20:2a:97:2f:
         2f:30:15:4f:56:80:71:94:57:f2:40:58:80:82:05:7b:c6:d6:
         5a:58:b3:fe:a4:31:a1:d8:13:40:30:74:7b:26:2e:69:b4:ce:
         e9:22:1f:ae:1b:f2:01:1e:41:39:59:81:d7:8b:b6:4b:20:d1:
         8c:77:77:79:84:65:e1:07:b3:c3:20:5e:f0:8e:2b:63:a7:7b:
         56:f6:45:96:be:9e:25:e7:20:d9:49:0c:0c:c5:5c:ad:88:7b:
         5b:c8:84:b3:b3:02:8e:17:76:2a:b1:c7:e3:0b:a4:f3:c8:49:
         0b:19:72:3f:82:d6:d5:39:6d:c3:1a:ca:65:0e:a7:5a:95:4c:
         68:08:d2:56:b8:e7:ae:74:87:54:55:1d:53:4f:56:89:bd:3a:
         f2:f0:b4:fe:78:85:ab:0f:3f:14:d4:b8:20:76:1b:27:9b:21:
         25:55:9d:49:fb:8d:b8:ed:28:3a:71:e2:d1:cc:f9:28:78:52:
         4f:19:cc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----