Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
File:                     BkAThp4LzSd4EEBTjflc-mfhFy4.cer (raw, json)
Hash identifier:          Rk9FNLi6UA+VtOqEV/96iL/lzMf530yxq6ONO76xPBw=
Subject key identifier:   06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01958EAC7783611F034F11E8EDE3F8EB567C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 13 Mar 2025 08:43:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214780
                          IP: 94.127.88.0/22
                          IP: 2a14:36c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:ac:77:83:61:1f:03:4f:11:e8:ed:e3:f8:eb:56:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 13 08:43:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=064013869e0bcd27781040538df95cfa67e1172e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:c3:0b:61:fe:a0:0c:3a:53:84:6c:be:7f:
                    e0:4f:3e:a7:bc:d5:dc:22:f0:13:bd:f3:15:a7:81:
                    18:86:e3:2b:df:f9:bf:a9:29:92:43:44:00:09:95:
                    99:44:74:90:7e:0e:67:aa:7e:cd:99:72:05:0c:d7:
                    12:75:a7:c6:cb:57:b1:91:5f:82:48:fa:98:6a:1a:
                    f4:47:24:59:07:a1:b4:63:3b:7c:4a:01:34:cb:63:
                    9c:a3:02:d3:d8:77:37:75:b9:de:e4:11:f4:87:60:
                    59:d6:1f:5b:09:04:03:19:b1:82:a4:7a:14:30:5c:
                    27:fb:98:1d:20:d5:7e:75:2e:a6:36:1d:2c:8d:59:
                    22:85:8f:19:9d:9b:dc:94:0a:25:94:b0:2a:dd:9b:
                    c0:da:b2:a4:1e:e5:9b:6e:87:cc:dd:0e:99:e2:2c:
                    e0:89:5a:ab:be:d3:7a:0d:df:37:5f:b5:8c:89:9a:
                    e6:4c:7a:ad:6e:5c:bc:09:59:1b:f2:81:f3:63:0a:
                    ed:de:46:a9:90:da:b8:4f:84:7b:c6:38:82:8c:7a:
                    a2:da:14:29:11:e6:0f:13:64:fd:59:43:a8:6d:5d:
                    5a:48:a3:be:29:ce:a3:69:76:3b:fa:f0:33:e2:af:
                    81:a7:ee:49:3f:3e:31:e5:0b:1b:c4:b5:3c:7a:15:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.127.88.0/22
                IPv6:
                  2a14:36c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214780

    Signature Algorithm: sha256WithRSAEncryption
         59:63:7b:b9:6e:08:c7:3b:81:f3:bf:2b:bb:ad:ef:a4:34:16:
         c5:21:9c:b3:73:39:51:4d:22:ac:c8:db:e2:51:8e:a8:db:0e:
         b8:15:3d:9b:d2:64:0c:25:d9:ed:bf:72:49:9a:05:00:3c:3d:
         25:cd:ab:8a:46:42:22:79:2b:97:fc:eb:5f:da:6b:fb:53:c3:
         4a:d5:80:28:8d:68:ec:2f:94:8b:89:70:03:ed:e4:20:08:3b:
         a3:07:c1:1e:61:b1:db:c0:27:3c:39:1e:b3:05:49:41:8e:5b:
         bd:82:56:a4:ed:02:fa:9d:53:01:b8:a0:ce:01:d9:a5:50:04:
         98:c4:12:47:5c:d1:09:8d:15:10:3f:ab:d5:a6:5c:c2:fd:ca:
         ef:06:df:23:34:32:96:55:4d:c6:77:a1:2b:b5:c6:f5:92:97:
         d8:5c:ba:eb:bd:d9:a4:da:fb:62:26:a0:2e:f1:72:7c:94:92:
         e6:f1:e4:14:06:50:01:c3:fc:35:32:5e:e8:f6:5b:9e:7f:2a:
         f4:8d:64:cd:de:3b:1a:50:53:da:69:5d:f1:0d:ce:1a:fa:5e:
         2f:6e:fc:c9:44:90:fd:99:e1:97:4a:1a:d4:b1:44:e9:37:90:
         24:f9:d7:57:e7:dc:f1:66:50:81:0f:0e:77:be:0d:c4:05:cc:
         7a:02:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----