Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
File:                     mcoxPONE16H95lvEpDIZoLN2Egw.cer (raw, json)
Hash identifier:          uj550dxIh8X7vA64LliOXIOoAShh1eRMU0k8jaBHlhc=
Subject key identifier:   99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5CD6EAF3CD09330CA4B3C2B36B3B8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.56.183.0/24
                          IP: 2a13:e800::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:cd:6e:af:3c:d0:93:30:ca:4b:3c:2b:36:b3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:fe:30:e3:bc:72:5b:40:78:84:b0:87:97:
                    58:72:c7:5f:88:a6:93:8d:f8:0e:55:67:53:62:a8:
                    90:63:38:56:44:16:50:a1:d0:c1:d3:0c:28:3b:fb:
                    e4:49:fd:b7:a5:42:9e:7a:fa:6c:ec:a2:29:bf:f4:
                    89:b7:97:bb:23:6c:8b:80:31:00:c2:93:4d:fa:0f:
                    88:ab:ed:c1:0d:f9:cf:ba:73:c0:94:6e:98:4c:e7:
                    88:49:09:ff:f3:26:11:49:80:8f:7d:c4:30:8a:f6:
                    c9:92:b1:87:c2:4c:ad:63:22:dd:90:78:0a:9c:d7:
                    ad:30:b3:65:86:bf:aa:a7:ae:8d:9d:7a:a8:3b:34:
                    3f:67:6a:26:57:0f:f8:f7:d0:52:ec:9b:27:99:d0:
                    f0:9a:22:ec:14:05:a9:6e:e3:1c:84:fb:02:6c:cc:
                    95:f1:08:75:fe:6e:fb:ed:01:61:d0:1d:90:5f:2c:
                    43:f0:6c:47:48:84:17:c7:82:84:3f:c5:90:5b:5c:
                    16:46:9b:f8:22:ed:80:51:e2:3e:64:7a:5f:6a:35:
                    78:3a:65:2e:7e:0b:f1:2c:bd:5b:11:cd:7b:96:3e:
                    a2:8f:63:0d:31:69:83:b1:65:f6:72:78:2c:0a:6f:
                    a3:05:91:0f:08:50:ef:9b:89:da:2d:b1:79:e3:9b:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.183.0/24
                IPv6:
                  2a13:e800::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:1a:3a:a1:8a:76:76:22:c0:74:02:28:eb:44:04:80:92:8d:
         89:e0:6c:4a:56:1d:9a:33:b0:72:49:23:14:8c:60:d2:e0:61:
         00:d8:35:8d:ed:06:4e:4c:9a:d2:ab:60:ce:3c:f9:99:29:7c:
         a0:8c:70:db:37:0e:4c:02:29:fc:1a:b2:9f:9b:17:39:f8:55:
         f0:2a:85:49:e4:b7:c1:dd:32:2c:5e:c9:ed:83:69:10:80:d1:
         54:c9:72:39:d0:f5:7d:36:e9:55:38:75:05:3c:71:fe:b6:83:
         3c:d5:e2:7d:d0:e8:4b:08:a6:fb:6e:d0:ef:59:7b:d6:0e:31:
         9b:cf:46:a3:70:66:3c:cd:cf:0c:5e:40:0b:43:b5:16:7d:9c:
         29:c0:50:71:bf:05:0e:61:db:2b:10:c9:ac:18:af:3f:98:95:
         58:94:8c:87:60:c1:07:06:6b:76:d4:43:16:34:41:16:2f:5a:
         76:86:de:f5:cf:19:b5:4c:42:28:65:53:6f:10:c0:24:9d:59:
         08:5e:65:ce:79:10:a3:43:d3:a9:c5:18:67:59:e7:30:35:87:
         43:3f:30:0c:3a:84:9f:0d:db:76:a7:43:66:58:91:dd:b5:9f:
         f9:b3:a9:ed:23:0c:69:a9:53:4d:e7:ca:bb:8d:78:0d:d8:9f:
         76:e0:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----