Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
File:                     u3C4koHNt2GgSty8CsQXBUExUOk.cer (raw, json)
Hash identifier:          lg8dgD+dMQ4BY7w8GXpP69pM84jXWamCAlCw7jJU0oQ=
Subject key identifier:   BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195373C98EE8A645464FDA4671CD4B1A4A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2025 09:14:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199545
                          IP: 2001:67c:bec::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:37:3c:98:ee:8a:64:54:64:fd:a4:67:1c:d4:b1:a4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 09:14:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:6f:28:2a:de:40:1c:bd:1a:af:11:55:ca:
                    57:20:e8:a9:66:56:3e:de:70:26:e2:1f:90:31:7f:
                    a3:a7:c7:b9:69:84:6f:60:6e:23:fc:19:29:75:2b:
                    18:a8:97:33:61:78:00:72:68:f4:27:8f:87:12:b0:
                    42:5c:b1:5c:a6:2d:58:48:fd:bb:d6:55:d3:de:b6:
                    9a:5a:c3:03:e3:07:6d:6b:1e:6d:3f:e6:a6:47:f0:
                    ee:2b:3f:86:18:83:18:29:45:6f:27:82:20:e0:3c:
                    67:9a:58:3e:90:ae:b3:46:f8:f4:7b:b5:1c:eb:8f:
                    9a:7a:ff:47:59:1c:8b:2b:c1:98:dc:56:0e:d4:d4:
                    2b:70:be:d9:26:33:53:01:fd:5f:94:1a:f1:88:98:
                    3c:0d:0c:2e:3f:bd:df:ec:0b:9b:c2:ff:c0:f8:b6:
                    dd:04:2a:1f:4b:47:06:f5:17:61:b8:2b:1f:61:e9:
                    70:14:88:2c:33:58:0d:8a:17:10:d9:51:87:fa:93:
                    19:98:97:f7:ea:21:08:a2:b1:dc:4e:28:5f:f7:84:
                    e9:25:24:cc:d3:ca:12:d4:ca:4d:fe:50:d2:14:76:
                    b3:b5:d8:90:36:49:f7:f3:11:5b:29:8d:af:43:4a:
                    71:a3:54:cc:09:6d:65:59:b3:9b:e8:ef:1d:c4:6c:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:bec::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199545

    Signature Algorithm: sha256WithRSAEncryption
         58:ea:6d:7a:06:9e:1a:c6:6c:cb:0d:bf:11:3e:c1:bc:db:e8:
         40:57:8c:cf:14:f1:10:29:fe:08:a7:23:dc:07:a8:77:a1:05:
         50:1a:b0:09:c4:73:5d:52:d9:30:b9:01:f9:eb:a3:30:63:4e:
         77:11:41:b0:58:0e:e0:79:2d:b1:a2:bc:8c:53:e5:a3:8b:00:
         98:13:70:2c:d3:dd:e7:b7:88:c6:9a:87:7f:9b:48:eb:9b:e5:
         91:69:bd:6d:50:7c:6c:a2:59:49:fa:5c:2e:15:b8:22:b7:8c:
         d7:4f:ba:f3:99:cc:ac:63:96:2b:aa:f7:1e:51:21:56:ec:ab:
         af:74:a1:f0:78:a1:23:e9:62:78:bb:4b:cf:21:70:10:e8:b7:
         93:b1:e3:a7:eb:83:5a:59:b8:ac:b6:a1:78:ed:8b:23:39:64:
         42:56:aa:0e:75:11:9b:8d:53:17:2f:39:b5:0a:bb:07:d3:60:
         a4:70:e8:77:85:f6:f7:c4:b6:8d:c7:ea:b3:20:1e:c4:44:1e:
         5c:ed:e2:0b:3e:86:f4:47:1c:c8:35:69:9b:1b:62:31:c4:50:
         78:2c:b7:02:a2:f5:65:67:60:cb:6d:60:80:8f:8a:60:17:3d:
         4b:83:11:de:29:9e:7f:df:c1:27:e8:26:7f:09:e3:84:74:3c:
         51:87:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----