Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
File:                     PL3ORcSILIo6JXEQxrHw1JsYKpw.cer (raw, json)
Hash identifier:          4r8JDnKWQq8VmyFKLQaK5sH4+zwZV49OEsHFx+lVCiQ=
Subject key identifier:   3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DAAD9E44A1728B2F0287CA046AE44
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211533
                          IP: 185.154.189.0/24
                          IP: 2a12:dac0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:aa:d9:e4:4a:17:28:b2:f0:28:7c:a0:46:ae:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:08:e0:dc:e8:6a:6d:ef:23:56:eb:bf:bb:
                    2f:39:be:20:3b:16:85:00:06:00:fc:0b:29:61:43:
                    d8:6b:5a:59:dd:0e:7a:15:9b:f2:1a:2e:73:77:c6:
                    11:bb:20:42:b9:4a:03:d7:fa:0e:63:fd:16:3d:16:
                    51:02:2e:f2:1a:8a:77:aa:c7:e8:01:87:6f:76:69:
                    70:2c:d3:bb:2b:f2:1f:db:21:4c:a7:7c:a4:5b:37:
                    77:52:20:16:c5:3e:f3:09:a5:97:41:34:9d:1b:6c:
                    bf:b2:ca:a5:09:10:5e:45:43:49:69:aa:7a:a0:9b:
                    03:2a:15:f0:99:10:1a:6d:05:51:c1:05:bd:39:27:
                    e0:1a:36:a2:00:2c:ca:87:e0:0e:d5:75:02:03:24:
                    45:c6:7a:a3:77:45:39:79:43:91:12:66:9a:20:5e:
                    73:32:5c:35:89:cf:e1:c2:51:4a:dc:68:8b:53:20:
                    85:a3:3f:01:cd:c0:4c:c6:80:7a:d5:60:4b:08:58:
                    07:40:5b:29:c8:8b:e1:2d:01:fc:98:79:d1:dc:46:
                    9d:4b:2a:e9:95:77:c3:9c:f0:2e:56:d6:1e:24:63:
                    17:b7:3c:6e:8c:67:ec:a4:d8:6a:ff:20:bb:c0:56:
                    a2:14:78:d5:2f:97:ca:a4:70:31:93:70:92:6a:51:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.154.189.0/24
                IPv6:
                  2a12:dac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211533

    Signature Algorithm: sha256WithRSAEncryption
         90:e5:0c:95:57:c5:2f:e9:92:a8:a6:4e:1e:08:d8:a3:12:80:
         0a:c1:05:fb:22:b3:54:14:44:ec:b0:a4:2e:e1:91:fc:bd:21:
         14:18:29:bb:77:9b:d7:00:71:9c:5e:92:0f:5c:63:20:51:e9:
         2b:f0:16:55:40:98:b9:6c:8d:40:67:d6:8f:75:9f:17:5a:c2:
         f8:ad:e2:bf:b6:c9:20:3f:bf:a3:bd:14:58:e8:aa:c9:54:7f:
         e8:10:58:a4:46:98:20:ad:1d:c9:88:42:97:b8:e9:8f:49:fd:
         60:f2:05:7a:84:19:5e:4b:9c:ce:60:45:42:82:e1:e4:cd:14:
         8d:a1:a8:f7:f2:bd:e4:ff:43:a2:1f:7c:96:5a:61:fa:41:e2:
         de:5e:6f:95:54:a4:fc:d5:91:01:86:be:da:5d:5c:3c:03:e9:
         1c:02:44:d7:e5:1e:da:3b:27:4e:3c:a4:9d:bd:e9:32:9e:0c:
         50:12:e3:c8:c0:9b:6e:21:87:4e:1c:62:f5:0f:95:b8:9f:df:
         6e:e5:96:7d:f3:57:91:76:af:5f:08:81:a8:2b:96:57:c5:e0:
         8f:b0:00:d5:d7:ba:8b:fc:9c:02:1c:1e:08:f1:50:39:7b:8e:
         28:47:20:78:e0:25:fc:a1:9a:af:97:8a:f4:74:c0:15:fa:07:
         07:7f:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----