Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
File:                     X17ZkhxjvxDbCEutMy6p_5-BmeY.cer (raw, json)
Hash identifier:          oIaLlt/YHpJd5Az2Jh/bUB3OmXuZVTzr23Sma5WISP8=
Subject key identifier:   5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5BDDF5155B463968468B7EE02E255
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44529
                          IP: 2a14:4e80::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:bd:df:51:55:b4:63:96:84:68:b7:ee:02:e2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:a4:e2:ac:f5:c4:99:b7:33:fa:e3:48:84:
                    5a:f1:81:e1:75:17:41:2b:dd:d3:35:e3:f4:c0:e5:
                    8b:cd:cb:bb:17:aa:c0:d7:9a:fd:da:8e:ea:de:2e:
                    14:bf:f7:d5:63:84:08:1a:a1:a5:a3:a2:76:1b:47:
                    f6:73:ec:d1:d7:6f:2b:e4:7f:4b:81:2c:4e:dc:17:
                    5b:a3:1f:d4:e7:4b:3b:2e:eb:84:85:16:00:b4:c1:
                    5a:f3:33:e2:3a:cd:50:6b:3b:d6:21:12:e5:56:d3:
                    1b:0b:07:c2:51:50:a4:c2:42:64:61:d2:94:38:ff:
                    b4:b4:48:93:b6:46:b9:1b:54:dd:fb:3a:d6:0f:23:
                    1c:fc:47:33:0a:a2:70:23:5c:ff:b4:20:48:2f:ee:
                    56:71:6e:01:00:04:68:df:b0:08:ab:a0:56:f4:c8:
                    62:04:4e:49:9e:5c:f0:01:10:33:03:a4:b6:61:74:
                    77:11:6a:48:1c:e6:01:c3:90:c7:20:59:97:dc:7e:
                    92:63:ee:76:2e:8a:3f:1a:93:62:03:5b:70:af:36:
                    42:a3:b1:2a:ee:0c:c1:16:90:f0:74:57:21:1d:cc:
                    dd:7c:38:99:7c:63:9d:a4:f2:8c:45:89:38:14:b7:
                    6d:49:71:33:b3:79:b2:e7:1c:96:33:ab:a6:b2:0b:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4e80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44529

    Signature Algorithm: sha256WithRSAEncryption
         18:f9:2e:be:7c:79:dd:a5:75:5b:b7:74:a4:0f:ff:ff:87:51:
         b4:7b:42:51:8b:21:ad:ab:e8:5d:a9:ea:30:53:5b:d3:98:ee:
         7f:3d:17:97:34:ad:2c:c7:ac:fa:68:d6:68:81:53:3c:3b:a0:
         9a:c2:0c:bd:f3:ab:e7:78:ed:58:7a:4d:44:87:74:3c:1e:d5:
         a3:f5:da:16:03:ee:5a:bc:bb:e4:be:66:a0:89:83:71:77:2f:
         d3:bc:58:a4:3c:fc:8b:ba:d0:0a:d2:18:37:40:40:b0:94:4a:
         b4:88:35:12:63:36:e4:6c:dc:e4:37:36:6b:b2:24:5a:e1:2b:
         f2:ab:05:2d:2a:d9:fc:7d:80:f0:78:fd:21:8c:ca:a9:02:ae:
         4c:d3:6a:11:5d:5c:95:8d:84:ae:f9:fe:ca:e8:25:3f:3a:3f:
         8a:fa:12:fb:56:13:f1:8c:33:a0:5f:b1:b4:b5:b2:89:e7:cb:
         33:4e:73:f8:7a:c7:d3:ae:d2:cf:df:41:74:b3:0a:fe:2b:eb:
         7f:4a:3f:cd:89:46:39:a7:c2:19:9f:43:d4:97:51:e9:e4:75:
         1a:17:db:4e:72:dd:e5:e7:33:14:b1:ef:69:fd:01:48:75:2c:
         a1:36:54:23:41:5f:34:87:42:e0:6c:37:d2:fa:e0:8f:a3:12:
         f7:7c:6b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----