Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
File:                     rmjJUYwq1UwKy4IUaMhuRboWHBg.cer (raw, json)
Hash identifier:          XDUe438E81S8AAz9pEohSWmvaY9mKhRpIgJNZdzDwbI=
Subject key identifier:   AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA64B93DEFA4524C5A96DC921F701D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202531
                          IP: 185.151.219.0/24
                          IP: 185.206.254.0/24
                          IP: 2a0f:c680::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:64:b9:3d:ef:a4:52:4c:5a:96:dc:92:1f:70:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:46:81:1b:30:01:58:95:b2:fb:b9:d0:09:7f:
                    38:12:d2:3b:c9:e4:ca:df:48:78:23:bc:d9:50:67:
                    ad:bc:b9:73:40:26:bf:a3:36:42:ea:4a:b6:0a:29:
                    ed:90:e7:5b:8f:67:75:19:64:c9:eb:5f:37:69:59:
                    d8:1f:d8:58:65:67:5c:76:bb:79:e9:32:c5:08:6a:
                    d6:5b:18:6f:2a:b3:f5:11:2b:22:51:a5:f0:fc:da:
                    e4:a7:fe:11:41:b7:e5:bb:51:b4:12:ed:35:f1:5f:
                    7b:79:97:d9:61:d5:a4:95:ef:11:d8:9c:ee:45:e5:
                    b2:8a:34:b7:7d:5a:97:24:ed:05:52:58:e3:ac:b6:
                    64:b7:7a:74:a1:e1:dc:ab:73:3b:da:29:9c:9f:00:
                    ca:81:d2:f3:27:0d:0f:90:31:36:5a:ac:50:4f:75:
                    47:d0:23:92:a5:26:f1:ba:94:6f:a8:e7:d6:97:17:
                    8c:02:70:35:fe:73:18:00:7a:66:53:3b:1a:88:3e:
                    a4:02:d6:3c:0e:7e:ab:b6:06:62:8c:3b:ec:bb:2f:
                    70:37:a9:15:45:c4:10:77:8e:da:4a:9f:4e:39:73:
                    0d:13:90:51:d0:3f:0a:bc:4d:60:ee:27:fc:b1:6a:
                    68:9a:11:af:40:67:6b:8f:ec:93:2e:08:74:42:57:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.151.219.0/24
                  185.206.254.0/24
                IPv6:
                  2a0f:c680::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202531

    Signature Algorithm: sha256WithRSAEncryption
         07:a3:33:0a:a2:ef:77:70:dd:8c:61:85:1b:83:fc:ab:ab:16:
         32:99:65:b2:c7:f9:26:80:d8:9c:49:0e:78:26:46:a5:fe:d7:
         f0:92:4c:d1:23:4f:ac:dc:24:94:36:b4:d8:2f:98:5c:68:c8:
         6f:48:c8:42:25:b3:a5:67:d0:1e:0b:4f:c3:e2:05:f3:ca:02:
         0f:6f:6b:fc:d9:2e:a0:7b:3f:1f:3c:9c:85:dc:f1:70:27:d1:
         2c:0a:da:8e:f3:d0:2e:2c:f6:e3:d3:4c:71:38:17:18:6a:38:
         96:14:0d:74:8f:48:4a:83:29:29:d4:d0:2a:22:97:3a:c6:75:
         0c:1e:c3:bd:30:4f:3b:21:d7:e1:bf:38:19:3e:53:d6:96:66:
         35:cd:2e:25:6e:b4:5e:f2:f7:76:f6:9f:b4:e4:6b:71:d3:5e:
         1d:45:66:e0:f2:b7:3a:c8:99:d5:91:77:8c:96:14:69:e4:de:
         a8:9f:76:8f:84:32:e5:d3:e4:72:d5:9f:6e:c7:fc:a3:8b:fa:
         3f:27:3d:d0:06:a3:c0:42:84:13:b8:4c:29:64:24:c6:81:12:
         a3:f7:5e:12:81:9f:2f:f8:92:84:de:12:03:e7:55:ca:fa:8a:
         a2:39:27:48:66:82:a5:8e:98:4a:c3:08:d9:ad:cb:a0:26:7e:
         8b:48:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----