Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
File:                     mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer (raw, json)
Hash identifier:          YfCDtsGhLS9DBLMIjMw8lexToXDivf04J6W4rbDG5gs=
Subject key identifier:   98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B6929360766AA4D3D32F5BE5678ECB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:51:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43037
                          IP: 77.75.72.0/21
                          IP: 185.66.188.0/22
                          IP: 2a02:598::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:92:93:60:76:6a:a4:d3:d3:2f:5b:e5:67:8e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:51:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:e8:63:b3:51:e9:0d:a7:75:f9:f3:e1:ee:
                    c4:19:26:44:69:63:c2:7e:d1:6f:e0:65:5f:74:14:
                    93:91:dd:c9:44:10:bb:47:cb:2b:f9:d7:9a:ef:e9:
                    8f:62:b5:a0:5a:f1:2c:aa:d9:61:55:f3:f9:d2:87:
                    a2:ea:6e:52:eb:4e:0d:b8:d5:dd:9f:cc:54:14:6d:
                    63:4f:96:d7:48:07:f2:33:d7:77:94:cd:e5:f3:f4:
                    12:75:a9:74:b6:81:3a:c7:ba:eb:60:34:de:ef:86:
                    f0:c4:71:cb:c1:c6:62:f1:97:5b:25:1c:a5:27:06:
                    31:30:45:5d:91:e2:2b:3f:10:9a:99:63:78:6c:a6:
                    fc:1a:f5:3f:96:71:48:43:0f:cb:5c:18:9a:84:40:
                    4d:f3:78:60:2b:0c:11:ba:3d:d6:cc:2d:1b:57:99:
                    29:c1:16:57:8d:45:c7:1f:e1:04:fd:08:a2:83:77:
                    2b:ca:de:e4:79:60:a0:70:9f:3d:ed:b9:ab:fd:54:
                    a7:f3:2e:1b:e6:54:b2:dd:c9:85:b6:9e:6d:a7:42:
                    1e:f1:26:22:17:49:32:4f:e9:cf:59:de:a6:c6:f1:
                    62:21:1d:0b:93:54:ae:c7:4a:0d:dc:f5:7c:19:c8:
                    5f:95:0e:35:b7:ab:cd:8b:f6:21:cc:65:34:58:6d:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.72.0/21
                  185.66.188.0/22
                IPv6:
                  2a02:598::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43037

    Signature Algorithm: sha256WithRSAEncryption
         96:2a:ab:a2:ff:18:83:7e:69:0e:e7:63:a7:40:89:83:44:de:
         84:a6:0a:64:d4:0f:0d:50:ca:5a:a0:b8:e1:30:79:c7:62:c0:
         d5:f1:cd:35:93:79:f4:83:22:b2:24:c9:84:e1:d1:48:7b:5e:
         97:9d:a1:c0:4e:62:7d:62:f3:ac:18:01:15:12:dc:30:e5:e9:
         32:2d:bb:fe:65:ae:ef:f1:41:a5:ad:d9:e9:d5:d9:ab:ae:0c:
         ac:b6:e0:a0:b9:a4:3a:df:d3:15:60:4c:a9:5c:24:9b:79:da:
         8f:c1:44:1d:ef:f5:d6:0f:88:12:48:35:db:17:bc:63:78:14:
         29:2b:52:f6:32:e8:00:64:40:98:a2:91:f0:4d:e8:5d:83:d3:
         94:63:74:79:f7:58:bd:a4:41:d8:d4:49:06:03:d3:25:cc:63:
         d9:6b:ab:44:3f:4e:be:4c:06:07:79:ff:48:c4:ef:9a:05:93:
         1d:9c:5b:d2:db:e9:38:46:6b:b7:5d:07:44:43:66:67:7c:2a:
         db:e7:b5:4b:dc:9c:d6:d9:64:4e:c2:88:cb:ce:ff:76:53:46:
         cb:bd:ce:9d:31:f3:d6:e2:8d:8d:e8:bd:de:ca:3e:c7:99:e1:
         91:b4:fa:2a:e5:54:f4:c8:2d:2a:94:78:51:b1:02:b4:53:04:
         61:83:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----