Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
File:                     xnp-TG1V61E8VFdgqP9lba3wuNc.cer (raw, json)
Hash identifier:          IFqZRYwnOspnnat1YTa/RpOW68qNZ509bKYQRCoXKK4=
Subject key identifier:   C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194D55CDE334D4C86FA1D0837642D7D22EC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Feb 2025 09:07:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44818
                          IP: 194.126.132.0/22
                          IP: 2a07:fd00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d5:5c:de:33:4d:4c:86:fa:1d:08:37:64:2d:7d:22:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  5 09:07:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c67a7e4c6d55eb513c545760a8ff656dadf0b8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:5c:76:b7:92:9e:d0:63:84:cd:8a:12:14:
                    52:c0:b0:03:bf:29:53:97:e9:3e:dd:6f:d6:39:5a:
                    d6:c9:5b:89:68:4d:42:01:5a:b1:03:4f:bd:23:b3:
                    3e:65:6c:f2:29:35:fc:11:29:05:db:1e:7b:b5:62:
                    c9:f6:d6:a7:ce:ce:f2:9a:92:01:58:dc:31:76:78:
                    14:01:91:e4:61:55:63:fa:43:68:c5:d8:4b:89:86:
                    33:29:9b:04:92:65:34:a8:25:ea:bc:69:9b:e2:93:
                    65:d5:71:ba:04:f1:50:d4:59:45:34:23:ee:22:22:
                    53:46:2f:d2:a3:62:78:00:79:7d:03:c2:a4:7b:e4:
                    46:b8:8f:85:47:01:20:33:e0:d1:80:12:9a:70:15:
                    ab:0d:bb:78:b9:32:37:85:2c:89:8a:f3:7d:59:a4:
                    a4:bd:6c:a2:2c:62:6f:51:b2:49:e5:e1:04:72:dd:
                    a7:c3:ff:4e:74:1b:42:87:49:85:44:08:e1:be:07:
                    7e:50:00:09:00:26:ad:d3:9f:59:4a:63:81:af:07:
                    87:e0:38:89:f0:0b:41:0d:6e:aa:09:36:b5:32:91:
                    21:da:da:12:e2:35:e1:33:0f:0e:76:4b:56:86:d9:
                    d3:0e:41:91:52:9b:e2:ad:d4:97:2c:f9:5e:47:01:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.126.132.0/22
                IPv6:
                  2a07:fd00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44818

    Signature Algorithm: sha256WithRSAEncryption
         a5:82:e2:32:91:a6:82:78:3c:96:6b:14:20:4d:e6:f6:f3:7b:
         53:77:ac:45:a1:70:4d:b8:dd:a8:ff:18:27:ae:e6:3b:a9:97:
         43:4e:9d:7d:c8:f5:2d:c9:0e:97:a8:5a:57:38:00:27:1b:07:
         ec:ef:85:16:4f:b0:83:e6:66:87:a5:d1:ed:29:7d:f3:1c:bc:
         cd:7a:73:8d:38:ed:f5:72:c0:ea:bc:5c:e1:f6:d3:5a:74:68:
         bf:40:90:ed:40:e0:dd:49:6e:d8:a0:a2:a7:fc:d2:00:50:21:
         30:1d:d3:c1:b7:96:d3:9c:16:6e:f8:a4:05:e5:9f:41:b7:54:
         69:0e:63:bd:7d:a5:7e:7f:72:02:1a:9f:d8:d6:2c:86:b9:ac:
         c9:7e:64:f5:d5:61:84:8e:0b:da:61:91:af:87:dd:b5:62:44:
         e7:29:db:0f:3b:25:a5:57:a9:7c:99:5b:a7:e6:55:e5:c2:f8:
         43:cf:e8:25:c6:1c:14:e8:1e:6a:c5:f9:19:ab:3b:35:5f:7b:
         f1:81:cb:bc:91:e5:56:bd:85:14:3f:c6:f3:b7:a9:b7:84:fb:
         ec:05:e6:43:ba:31:d4:b7:1a:64:f5:96:78:27:54:c0:f8:95:
         f1:e3:14:f7:0e:4b:f8:10:c5:cd:55:44:78:29:ed:5e:4e:30:
         ab:6a:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----