Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
File:                     rO9NpWy5QNny99Ahryph-9OxTqg.cer (raw, json)
Hash identifier:          EHo9dAOZ5dre33bN8K3BzUKL1Xx9lDnfWJyGTe3hQvM=
Subject key identifier:   AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9B914570E550D7CFD1EBE59428B81
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49844
                          IP: 91.206.28.0/24
                          IP: 2a12:f840::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:b9:14:57:0e:55:0d:7c:fd:1e:be:59:42:8b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:0c:38:52:d9:ef:88:82:5e:07:10:fe:cc:
                    af:e8:c7:f3:79:91:01:71:54:50:0e:cc:06:b9:c1:
                    ef:43:97:06:27:9d:20:79:a3:ad:03:57:fb:08:af:
                    41:5a:c1:83:c0:ec:f9:3e:6c:b3:0a:e0:77:9f:db:
                    10:4a:fc:a4:52:ba:a9:d4:c1:d4:87:14:8a:76:28:
                    f2:ab:fc:d9:bd:45:25:79:7c:f0:8a:cd:d0:a5:33:
                    5b:3f:26:6d:ae:f0:5e:59:8e:e3:92:b3:f6:05:c0:
                    d0:b4:56:98:c8:a6:6f:0b:d6:e5:07:2b:20:fa:b2:
                    10:08:ee:b0:32:ec:5a:bb:05:39:5a:9f:7d:9d:23:
                    63:6b:49:f7:3a:6f:15:82:f1:d1:54:bd:b1:20:b4:
                    35:91:7a:5f:05:d4:27:d1:2b:ed:23:f1:39:51:c3:
                    ef:be:70:d8:7d:88:f7:83:f9:33:d3:fe:50:fe:86:
                    72:b1:b7:0b:6b:a0:7b:3b:54:ea:0c:31:b7:5b:dc:
                    08:87:81:06:e0:06:e0:f1:25:5e:a8:eb:43:2d:83:
                    3c:38:4c:29:4c:c9:dd:ad:28:d9:3b:09:99:3e:49:
                    e7:18:8e:95:81:15:42:63:09:b7:ae:37:c5:b7:28:
                    25:68:f6:7e:7a:87:1f:05:d8:e5:6c:71:50:1a:4c:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.28.0/24
                IPv6:
                  2a12:f840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49844

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:e0:ac:6e:04:b1:6d:26:f0:c9:41:34:be:4c:39:97:be:
         16:15:42:60:02:7a:75:a7:ff:b5:b6:5e:d5:19:d1:7d:70:17:
         e2:a0:40:07:23:55:fa:8f:dd:45:47:90:7b:ae:65:95:6f:a4:
         c9:29:f6:c6:0f:9d:16:d5:b5:96:b9:58:29:03:03:47:b2:46:
         1d:f5:d8:d3:f6:c1:b3:3e:63:c8:e7:7c:50:09:32:ea:b8:9d:
         85:f6:19:16:c4:20:49:3b:a8:35:52:d2:6a:36:45:35:19:1e:
         4e:a2:b7:5b:7b:a1:25:f9:e2:8e:69:7b:6a:0f:21:42:42:e3:
         c3:25:d9:aa:35:18:70:43:bc:af:33:0a:30:6a:65:57:f5:3a:
         57:fa:b3:e4:2a:3c:59:56:3c:7c:7d:b4:9e:16:ea:ff:9d:a8:
         64:c1:31:55:7b:c1:6f:f0:7c:bf:c7:9b:b9:27:70:a3:15:d7:
         f9:93:9a:14:2d:a7:40:ba:e9:1c:51:03:97:ab:e5:61:c7:a1:
         12:52:8a:33:5e:a2:7c:4a:58:4b:f2:4f:05:1c:27:48:a2:7f:
         7d:4c:c8:8c:9a:f0:7d:25:cd:d0:ef:46:6f:56:c9:1b:2b:0f:
         c9:0f:4c:2a:d2:3d:32:54:f2:85:8b:d7:4a:05:be:24:47:36:
         60:41:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----