Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
File:                     2n1fyh5GmSnUqLb1evPLzcY5o14.cer (raw, json)
Hash identifier:          EO9zQWOB8bRRJwRkx0yF+3z+GOw3BgkiU7CsFPGiMas=
Subject key identifier:   DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D978BC94025B2F49AC6BEEB27981C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210644
                          IP: 2a01:e5c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:78:bc:94:02:5b:2f:49:ac:6b:ee:b2:79:81:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:2a:75:c6:cb:d0:10:a2:c8:05:ba:fd:a6:
                    1a:59:eb:d8:38:4e:d7:61:6d:a7:fa:8b:a1:0c:e4:
                    4b:2f:83:cc:a0:21:a7:ae:d0:f6:55:0d:09:2f:dc:
                    16:b0:1e:68:c9:90:7f:09:24:23:20:48:cf:59:83:
                    13:93:33:7f:e1:32:c8:5d:f2:69:7f:07:57:70:b3:
                    fa:4c:65:ae:cf:7d:e6:a5:7a:a5:ff:0a:d1:8c:da:
                    5f:80:98:fa:8a:0e:b6:9d:97:fd:ea:7f:cf:c9:0a:
                    1d:7e:77:e5:63:3a:c0:a0:77:e7:1a:fe:5b:2b:4e:
                    0a:89:28:89:51:2f:8e:06:74:1d:b1:e4:86:3b:4b:
                    eb:e8:93:0f:17:28:de:3e:62:08:a4:a3:c5:51:d1:
                    e3:95:f4:81:dc:cc:78:7f:ae:20:ea:33:f9:81:43:
                    8d:4e:f7:3b:6f:97:31:6f:5c:0c:1c:36:1d:9d:45:
                    9f:26:3c:90:0f:df:5d:c7:4e:4d:fc:48:e4:a9:27:
                    f6:ce:db:f1:19:74:09:12:40:43:0e:ed:de:a4:09:
                    b4:e8:11:be:63:f6:fc:f2:4b:ed:ee:0a:a3:97:13:
                    a3:44:44:b5:8d:b2:d7:5a:e1:08:ec:da:5b:cc:e1:
                    fa:ed:31:93:96:3d:7c:34:f8:1c:0b:88:4c:ba:47:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:e5c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210644

    Signature Algorithm: sha256WithRSAEncryption
         af:f2:9c:35:e9:5b:89:41:7c:61:87:72:e7:60:ad:f3:3f:39:
         3c:9c:29:11:3c:17:13:f3:96:f0:48:4c:36:75:c5:bf:01:2b:
         99:4c:e7:7a:09:07:27:42:53:19:a4:f7:26:c9:ba:9c:d7:58:
         25:6a:06:95:99:89:bf:a2:18:4c:0a:01:50:42:da:cc:0d:11:
         d9:e1:13:83:75:2b:4f:bd:3b:8e:c0:85:b8:3f:0a:88:49:d8:
         90:ca:30:5c:5b:39:05:c2:c7:b9:68:b9:df:e1:1e:14:90:fc:
         57:b3:ae:f9:d9:73:b0:0b:ef:14:4c:aa:fa:4e:74:37:27:38:
         1c:04:47:1e:1b:cb:07:79:58:14:d0:20:ef:ae:98:24:c8:c3:
         6a:80:0f:e4:94:66:a5:f1:a6:7a:1f:a7:2e:2f:40:75:04:ec:
         5c:85:42:a9:97:ec:3f:32:bd:d4:b8:e3:9f:52:1e:4e:d0:f2:
         bd:33:74:dd:4a:03:4b:8b:4e:45:ab:69:96:18:09:2e:74:b4:
         43:e1:e2:24:09:de:73:c4:21:71:3f:86:a3:a0:f6:c8:0c:72:
         5c:be:5b:28:8e:8a:a4:e3:50:5d:8e:90:79:d1:9e:44:a3:db:
         57:64:23:d8:30:a3:0b:f5:89:1a:11:24:5b:4a:d8:bf:c2:14:
         bb:4d:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----