Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
File:                     sN-v02cwOW_jOOdy2tvkw8hc2VI.cer (raw, json)
Hash identifier:          cbm+QPuKCZe9KE4QF9XlQlCeocU5Z15jcL+bWkypwSI=
Subject key identifier:   B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC9F1C4DEF4F81A34E8FF16286E6CC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 31287
                          IP: 45.66.44.0/22
                          IP: 93.152.231.0 -- 93.152.232.255
                          IP: 2a09:6340::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:9f:1c:4d:ef:4f:81:a3:4e:8f:f1:62:86:e6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:8a:e8:40:03:d2:47:69:c1:07:8f:9e:2e:
                    5c:f4:e3:7f:c1:3c:c9:25:0b:64:03:13:af:9f:84:
                    f8:56:f9:28:cc:ee:57:f8:02:33:8e:ff:5c:b8:01:
                    e7:ce:f3:4b:91:2a:bc:ae:ab:e6:05:f7:74:bf:34:
                    61:e4:78:80:f9:69:8e:56:07:d2:11:b5:96:84:8f:
                    f1:ae:2e:98:f7:be:f1:64:e6:9c:fb:50:d0:22:96:
                    64:5d:70:3e:0e:10:fc:40:33:f2:87:b2:87:dd:45:
                    61:a8:ea:20:7c:32:76:ff:ad:ff:86:9d:52:4e:9e:
                    6c:c2:49:ea:a7:b2:81:15:74:8e:b7:21:f9:e5:36:
                    2d:2f:b2:a8:dd:37:99:9f:a7:b0:9c:00:45:80:91:
                    2d:26:3e:2d:f5:6a:9d:96:e3:63:c7:51:47:88:f4:
                    5f:4a:b5:95:e7:b0:f1:43:bd:a9:ba:2d:42:68:59:
                    a8:6d:d8:12:5c:00:10:21:7c:67:1c:27:b4:01:75:
                    53:15:d1:b5:4f:33:75:c0:98:7d:5a:01:39:92:79:
                    c7:85:28:40:9c:8e:4a:56:0c:e8:f1:93:0a:e0:76:
                    2c:65:2b:18:74:e6:7a:ef:2a:a4:c7:30:23:c1:a1:
                    c0:f6:a1:5a:e8:3e:3a:4a:ff:9e:f2:2a:90:0b:cc:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.44.0/22
                  93.152.231.0-93.152.232.255
                IPv6:
                  2a09:6340::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31287

    Signature Algorithm: sha256WithRSAEncryption
         68:66:95:df:75:1d:e2:2f:dc:e9:f0:fe:2c:ee:a7:9c:14:bb:
         66:38:d5:4c:e8:c2:a5:dc:29:bd:3f:b4:eb:96:21:e8:44:38:
         17:a6:8e:1f:c2:81:11:1b:0d:6c:ec:e0:5b:8b:ab:a3:f8:7d:
         91:6a:95:cb:44:a6:34:ec:c8:ca:ad:6f:76:56:2a:64:97:df:
         05:17:5e:75:d1:d6:0b:3b:cc:19:bf:81:fd:73:c2:22:2b:54:
         5e:78:6c:d2:cd:31:9e:cd:6d:b0:30:74:f7:02:e3:d2:3e:f3:
         29:c4:97:43:c4:e0:d4:29:7e:32:c3:3f:1f:77:6d:66:15:f9:
         ed:11:5d:6c:2c:0d:37:e1:23:4e:1e:6e:c8:ae:8d:bd:e2:de:
         5a:d9:b5:f4:7b:c5:64:dd:ea:40:b9:87:fc:c4:ed:59:ff:19:
         c6:bb:1f:fb:d8:1b:3f:27:13:9d:43:e3:c3:41:54:c0:9f:07:
         21:19:f7:9b:35:c2:dd:a0:2a:85:2c:40:3d:88:0f:a2:9b:7b:
         04:5a:b9:9b:5f:66:45:10:b7:20:37:8d:6e:1c:b0:d0:80:24:
         fe:81:c3:74:3a:46:d1:cb:46:96:bf:80:cd:af:4e:6b:6d:2a:
         58:86:fc:3e:ba:7b:a5:e8:56:c1:79:d7:45:64:ed:5f:ac:b7:
         40:55:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----