Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
File:                     so7x9PiCePTfGec-M4HOzXjgacE.cer (raw, json)
Hash identifier:          uLeG48yO0HVo172+puCnmWWtUJ+pHWhuWtuvdlW7W50=
Subject key identifier:   B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424453E1610C6842775E99EDF63B37F57
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214165
                          IP: 83.175.143.0/24
                          IP: 2001:67c:260::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:3e:16:10:c6:84:27:75:e9:9e:df:63:b3:7f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:d1:23:aa:0a:9d:52:9a:8f:a8:84:45:64:
                    23:55:d5:8b:08:34:84:75:1b:58:1b:56:c3:96:aa:
                    b4:4f:ee:e1:d0:43:fe:1f:32:2b:03:4e:33:00:b0:
                    74:92:7c:04:9d:17:22:90:ca:0e:1d:d2:3a:3b:30:
                    fe:69:8d:ba:8c:98:dd:a9:a2:58:46:96:45:65:2b:
                    48:15:60:71:ef:60:84:83:d0:3a:49:bd:84:58:bb:
                    f7:79:ae:2f:01:89:f1:a5:97:c2:8a:50:31:d6:7a:
                    86:ad:e1:7b:86:27:db:38:90:5e:68:ce:93:fc:90:
                    da:f5:79:c8:b8:65:f4:09:fb:3d:af:16:68:97:3c:
                    34:8b:a4:8c:bb:67:ef:db:15:81:51:7f:33:22:fb:
                    3c:2a:89:75:52:86:ac:3c:03:38:08:c8:b9:45:27:
                    12:be:a9:52:a4:d1:90:06:06:61:07:5c:aa:c9:95:
                    e2:dc:72:fe:71:a8:b4:2e:f6:9c:d9:a9:9c:65:0e:
                    2c:17:86:38:af:5a:92:23:f7:65:6b:87:1c:a0:ed:
                    22:a3:61:bd:94:03:85:aa:f2:94:2d:4c:4c:6b:61:
                    d7:03:67:c7:ee:0c:8c:1e:1f:a1:5c:b3:ab:52:31:
                    32:ca:90:91:a1:a8:e7:f7:13:61:ed:7c:6d:bf:81:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.175.143.0/24
                IPv6:
                  2001:67c:260::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214165

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:de:0f:31:11:d7:ab:3c:50:f1:ef:c1:de:5a:10:fe:39:
         a3:59:69:eb:77:b5:cf:c6:a7:29:11:2a:a3:1b:6d:58:4f:50:
         24:bf:2d:ef:f7:a5:52:e8:88:e1:17:d5:c2:ae:d3:32:00:78:
         bb:7b:b6:7c:d4:e4:09:92:de:1b:34:27:ca:81:e0:63:65:90:
         85:b1:7d:08:db:86:f8:9c:d8:52:66:49:ac:96:be:de:06:66:
         a1:40:69:21:47:06:99:d0:2e:07:c8:81:07:33:e1:7b:51:4f:
         54:e1:01:61:9b:18:24:d5:71:a2:67:ca:70:0e:56:7a:8b:e9:
         73:59:0e:46:49:a0:eb:f1:3d:32:46:81:4d:c1:80:4d:4e:c1:
         48:ea:7c:a4:ff:23:6a:ed:52:d2:71:e0:e6:6c:7d:6c:96:c6:
         08:09:c2:35:dc:df:f4:a0:a0:2b:1a:61:45:e2:98:1d:c5:34:
         19:91:77:d3:80:57:b0:df:a8:06:5e:b7:37:f7:7d:b9:16:a3:
         28:6d:dd:1a:39:d8:7a:e6:95:4e:49:92:df:7e:5a:64:2e:93:
         55:b7:e9:50:35:c0:71:ed:0c:7b:ca:3e:32:82:a0:22:ea:11:
         23:96:ee:a5:e4:e9:1e:40:f3:3e:97:6c:ce:81:2b:ad:cd:f8:
         85:43:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----