Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
File:                     sK_tekcdesOF47k2Wk6WASoBwJU.cer (raw, json)
Hash identifier:          2QxkSeG60Y3FFgw0BBqtA5L+QZuW/qwGPSfE4MMAGlQ=
Subject key identifier:   B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424455864591773EB12CF00B4574D1829
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34620
                          IP: 85.255.64.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:58:64:59:17:73:eb:12:cf:00:b4:57:4d:18:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:b9:04:b5:92:9f:20:4b:3a:df:68:f2:3f:
                    29:c5:5c:83:eb:3c:98:40:91:1e:73:39:e0:44:a8:
                    a6:30:12:6f:06:c8:08:41:fe:e2:f2:6b:e9:b6:2a:
                    0e:39:5e:3b:55:f9:35:17:98:ed:a0:64:f8:73:a7:
                    15:32:4a:7d:e8:87:93:8b:ee:3b:ab:93:23:12:f6:
                    07:b7:cc:e4:83:73:8a:60:26:70:cf:af:b9:89:bf:
                    63:ec:5f:db:0c:dc:14:9b:13:bf:b4:dd:06:a2:f1:
                    2c:65:38:d3:77:5d:ad:12:28:36:fa:00:a0:f9:b6:
                    fa:9e:8a:c8:b9:0d:86:22:b7:b4:b6:39:4c:01:0e:
                    c4:91:0a:19:82:c9:da:41:28:5e:65:3e:a9:e5:be:
                    9c:cd:61:f1:e8:d6:a7:ff:db:ea:99:7e:fb:74:70:
                    07:4f:da:4a:bb:aa:1d:ec:06:fe:14:f9:8e:38:ed:
                    a4:11:09:47:8b:e4:06:9c:32:1c:31:c0:4f:3d:0c:
                    7a:0d:d0:37:dd:a6:6a:1c:9e:dd:77:fb:b0:e0:3d:
                    d0:04:40:18:6f:fe:29:f4:4a:2c:66:3d:17:d0:d2:
                    18:ed:f7:3c:17:4b:8d:a9:59:60:99:a2:b5:ba:b1:
                    e1:4d:35:0d:35:fb:08:0b:df:63:19:97:39:71:f4:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.255.64.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34620

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:3a:77:86:00:fa:24:0c:71:39:12:fb:e5:16:e6:62:53:
         23:64:2c:13:47:ca:0c:6e:e4:cd:2f:b4:4d:6e:b3:60:15:45:
         7e:09:39:5e:bd:da:a8:35:6d:70:27:a3:68:f2:47:94:5e:80:
         db:da:6b:15:52:bb:5f:58:7d:64:a1:f2:ce:a3:75:ec:d5:5e:
         9c:13:f4:f2:06:23:ec:11:66:74:92:8c:92:cc:af:af:38:1b:
         f8:58:6e:03:8f:11:e3:04:dc:fb:fe:eb:03:a3:b9:3f:ea:43:
         16:a9:e7:cd:ba:50:bf:d0:9b:ea:54:7c:23:f8:60:6d:12:9c:
         f1:f5:ec:b5:ef:87:bc:1d:ca:c2:aa:71:b2:c9:8e:e5:29:0c:
         a1:c3:84:4b:3b:db:a4:46:16:ee:b1:fd:f1:27:6d:88:36:f7:
         1a:f6:d4:6a:32:aa:e0:eb:ba:59:93:b3:da:3f:0d:5a:fa:93:
         50:b6:a2:6f:c1:fb:83:29:fc:eb:d8:cc:19:08:e6:98:3d:1f:
         47:1c:76:98:f2:6f:3c:d4:bb:b6:cc:56:ae:b0:b8:31:09:21:
         75:3c:c2:78:7e:14:29:70:b3:97:ee:a9:f2:f5:9f:6a:ab:95:
         27:dc:e6:3b:e7:3c:5b:00:6e:8c:73:e3:e9:2f:e0:31:0f:a5:
         84:bd:c9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----