Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
File:                     4FotrPXdTpv6LS2bLTw_lnh0WEE.cer (raw, json)
Hash identifier:          JtIYBsRw5/dbSCQOjN1050ob75amIdt9muFDyqFbSpM=
Subject key identifier:   E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9D8890A1597FBD4E1E1A8C6746D19
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60390
                          IP: 185.31.180.0/22
                          IP: 2a00:bf60::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:d8:89:0a:15:97:fb:d4:e1:e1:a8:c6:74:6d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:39:e2:57:a2:34:f7:28:87:37:67:ba:35:
                    e9:81:76:d7:32:87:66:e8:53:2f:0a:c4:cb:1e:ff:
                    45:c3:8b:ce:b3:c1:6f:b0:31:4f:aa:ae:22:fa:07:
                    63:3b:99:3b:72:2b:a3:e3:2b:a4:33:d6:b8:50:a4:
                    5d:43:48:cf:bd:fe:71:9a:87:e5:6d:2b:06:e4:1c:
                    97:e6:25:af:4b:d6:ba:59:ce:ae:da:42:ec:aa:58:
                    04:6c:2f:f9:9a:9f:3b:cf:6b:86:f1:97:80:8a:80:
                    71:dd:e2:ee:cc:41:8f:33:97:42:79:b5:89:19:84:
                    16:db:d7:02:f3:19:f4:c2:81:c8:1b:e1:14:ef:50:
                    77:a2:f7:3f:68:31:cf:fb:cc:69:b5:bd:6b:47:74:
                    0b:67:81:01:b4:cf:bd:77:a2:f7:73:ef:49:9e:c1:
                    c0:32:41:73:3a:c5:1c:fe:84:10:f9:f3:11:71:d9:
                    01:75:52:fa:3b:04:72:1e:1a:4f:e1:3b:48:29:b9:
                    f4:33:c3:a9:75:3b:fb:56:c0:eb:74:22:c9:b9:69:
                    23:7c:a2:e5:20:84:8c:39:1a:7f:f1:61:2e:77:a1:
                    80:73:e1:39:fa:46:f7:bd:d7:65:9f:2b:4c:3b:dc:
                    b5:1b:c6:94:dc:bf:f2:f6:6b:73:7b:de:fd:b6:d0:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.180.0/22
                IPv6:
                  2a00:bf60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60390

    Signature Algorithm: sha256WithRSAEncryption
         03:29:c4:15:d2:cd:b3:c7:83:49:0b:c3:7f:8f:e3:c8:f1:3e:
         99:d9:f6:40:cd:c4:cf:c9:78:95:ab:ed:de:6d:5c:d4:ff:48:
         d1:61:32:2c:8d:0b:7c:45:22:32:dd:dd:3e:fe:fc:3b:d4:78:
         6f:40:c2:ca:83:2c:78:dd:d6:f2:d7:a9:71:d9:56:70:64:65:
         11:85:4a:fd:b5:ac:65:68:26:72:ec:93:3c:d2:4b:6b:1d:79:
         92:f7:41:af:5b:d7:f6:1d:c4:79:3f:3e:c4:43:78:30:96:d1:
         87:b4:68:eb:38:14:30:52:10:59:3a:68:b1:35:ad:bd:19:b4:
         c7:73:d7:54:c1:18:61:6b:c5:55:94:20:6e:e5:79:8f:37:8d:
         7d:d0:19:18:18:4e:aa:b3:5b:90:5e:02:6f:4f:b6:0f:b6:8a:
         73:8c:f1:e5:de:29:07:92:ec:b4:1a:e3:b8:79:32:23:3a:6f:
         2f:68:dc:59:dd:82:d0:a4:a7:6b:21:76:d0:f3:1b:a3:ce:22:
         6e:12:48:01:9e:c7:2f:e7:6c:f8:34:9c:42:7a:28:a6:7e:1a:
         c1:5b:95:74:e9:3b:f8:aa:62:d5:ac:d9:0c:38:73:ca:70:cf:
         70:87:df:aa:31:2d:5c:b8:4a:34:d5:20:a9:6a:08:80:d4:2e:
         98:76:0d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----