Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
File:                     sBECIYfjOVoVJPoadUHqeTKFr8I.cer (raw, json)
Hash identifier:          v+5ixGsu1CDNzFXqpzGszmB+TeHMzbaaNF3REw0Bl04=
Subject key identifier:   B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422200B9A0513EA1267C2D58891B1B9C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39308
                          IP: 46.21.80.0/20
                          IP: 89.144.128.0/18
                          IP: 109.109.32.0/19
                          IP: 159.20.96.0/20
                          IP: 176.12.64.0/20
                          IP: 185.56.96.0/22
                          IP: 2a00:1570::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:0b:9a:05:13:ea:12:67:c2:d5:88:91:b1:b9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b011022187e3395a1524fa1a7541ea793285afc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:05:92:9b:58:b1:d1:bd:31:ad:fa:37:96:f3:
                    9c:44:9f:53:c1:6f:cd:5c:64:d7:ae:4e:6c:df:4f:
                    3e:18:bd:b0:4a:69:e5:b4:62:f2:a3:0f:ea:82:1e:
                    3f:e6:f5:9b:7f:c2:cb:65:48:8c:be:f6:77:23:4d:
                    c0:50:bb:15:a8:4a:99:d1:7c:ac:34:00:7a:b1:fa:
                    0b:f5:8e:42:03:42:01:cc:fd:a8:9d:ba:7e:88:05:
                    e6:21:e8:14:2a:5f:9e:4f:1e:19:32:45:6e:cc:19:
                    96:5a:76:39:d1:28:03:c8:10:4b:a7:ff:34:29:2e:
                    e2:b0:d9:09:69:a1:27:a3:51:93:42:21:99:5f:ad:
                    f0:19:69:46:11:e2:2a:9e:a8:bb:f6:e6:0a:ed:a2:
                    52:88:8f:12:70:92:06:31:a5:b5:8f:fb:26:a4:8d:
                    86:56:2c:12:dc:fa:34:77:b9:c2:88:ba:31:c0:8e:
                    d7:0a:b2:ff:b1:4c:1c:b5:bf:03:fe:f3:af:9c:81:
                    47:36:2f:c1:7b:fa:0b:5e:d6:df:bd:d0:ff:f0:96:
                    50:dc:e8:3d:a2:9d:73:a2:0e:f2:46:bf:bb:99:73:
                    46:c8:d3:79:eb:54:b9:f0:b2:3f:69:e2:2b:27:5f:
                    e1:80:88:ac:0c:e3:97:1f:b9:01:4b:b7:eb:8f:6c:
                    db:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.21.80.0/20
                  89.144.128.0/18
                  109.109.32.0/19
                  159.20.96.0/20
                  176.12.64.0/20
                  185.56.96.0/22
                IPv6:
                  2a00:1570::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39308

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:be:e4:27:e7:a3:d0:50:c4:d8:25:65:57:fb:ca:b5:03:
         fb:c6:7b:e3:2b:4e:9f:c8:b9:92:a2:e8:17:16:86:ae:e2:13:
         e0:ea:45:5d:5e:12:a6:39:0b:d5:e1:b9:dd:54:ae:92:79:0e:
         cc:1d:9d:aa:ed:e5:c0:de:9f:dd:d0:fd:ee:70:b0:2d:17:d5:
         44:1c:2d:4f:bf:d5:a1:6e:86:7d:f2:7b:22:91:ee:11:d4:d3:
         46:88:cb:a4:5c:ce:57:c1:13:bd:74:97:9e:35:f8:db:07:26:
         11:ec:96:ff:26:9f:51:3a:38:93:a8:9c:6c:0c:b1:d2:dc:14:
         55:1f:3d:93:e3:09:c9:16:78:62:d1:55:1c:b3:0d:a2:b2:7f:
         11:14:ad:ee:d0:f0:0b:ae:18:80:cf:9e:23:93:03:0c:52:25:
         45:61:a9:d0:17:0d:8d:b1:84:8f:cb:6d:85:e7:90:52:13:7f:
         04:b4:31:e3:cb:d7:32:74:a0:2a:54:d5:8b:f3:e6:fd:bb:10:
         2d:f8:4f:6c:d5:38:77:49:c1:86:52:f0:b6:83:1d:bd:d9:70:
         bc:fe:8d:87:a7:18:c9:0a:19:6e:d7:4a:9f:e2:8f:3f:ea:ae:
         42:b8:bd:5c:7d:68:0a:6a:e9:97:6c:32:58:8d:fb:c4:8d:a5:
         bd:a0:03:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----