Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XPRYPgFOuFcBj-61ySzhdToJy6A.cer
File:                     XPRYPgFOuFcBj-61ySzhdToJy6A.cer (raw, json)
Hash identifier:          AD0ihhdR5cfalLq0d2wp+pZGeT9MARN10yPuOKL6Tck=
Subject key identifier:   5C:F4:58:3E:01:4E:B8:57:01:8F:EE:B5:C9:2C:E1:75:3A:09:CB:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019541D9E116FB36A6D7167CFA4029BCEC97
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 26 Feb 2025 10:42:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212634
                          IP: 2a14:9080::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:41:d9:e1:16:fb:36:a6:d7:16:7c:fa:40:29:bc:ec:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 26 10:42:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5cf4583e014eb857018feeb5c92ce1753a09cba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:3b:ad:93:ab:48:47:9c:4e:a7:83:e3:7a:
                    37:af:e1:fa:dc:94:9b:a3:d7:2d:75:fb:42:69:a6:
                    fd:2b:1d:fb:25:62:44:7a:1f:81:93:c3:48:3b:68:
                    7e:69:82:68:e3:5e:39:2e:dd:e9:92:04:a5:f8:22:
                    4e:d3:7f:49:b1:7b:0a:d6:8d:dc:af:1f:2b:2a:98:
                    5b:f1:f5:8f:89:6a:a3:80:87:c9:ae:d3:89:86:70:
                    88:49:6b:11:57:2b:1b:7a:2d:4e:e0:e3:72:b8:11:
                    f1:66:c4:91:94:c4:9d:1c:48:c2:78:1c:c0:8a:c5:
                    fd:cb:cd:46:79:e1:59:45:c8:73:a0:80:db:03:ba:
                    07:d8:f9:a9:df:6e:75:93:78:4b:b1:eb:80:bf:8d:
                    78:d7:a9:ed:83:28:00:98:6c:8c:97:e9:91:f9:9e:
                    79:27:1b:90:1d:73:98:75:f1:fd:36:8c:1e:c3:cb:
                    83:96:e7:58:71:31:13:04:22:dc:58:3c:af:d4:e0:
                    36:25:ab:94:d1:42:3f:77:9c:f1:a3:1f:0a:96:93:
                    a5:52:b1:7f:13:7f:87:3f:ab:ba:14:a8:7c:ed:e4:
                    78:e7:1e:84:9d:f7:b6:95:ed:e5:f8:b4:8c:79:15:
                    90:9b:9b:3d:63:5e:4b:3c:4a:52:44:13:e4:6a:58:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F4:58:3E:01:4E:B8:57:01:8F:EE:B5:C9:2C:E1:75:3A:09:CB:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:9080::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212634

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:6b:82:ce:76:e5:fa:e9:16:11:b2:36:57:e5:41:08:4e:
         6a:35:54:79:d4:bd:a5:e3:26:31:1a:22:3d:d3:2f:ec:6a:7d:
         72:64:8b:dd:77:0d:5a:e4:61:4a:4f:b6:78:89:08:3f:dd:37:
         a6:be:f0:bd:25:eb:92:dc:ab:d8:79:c1:bf:ec:fa:69:3d:51:
         8f:a4:08:74:97:ed:14:35:ef:05:bc:92:0f:94:53:3f:1f:c7:
         52:01:f4:e5:69:d3:20:e9:6a:ae:27:09:0f:fb:25:f4:1c:fd:
         af:ef:39:67:2e:b8:14:88:62:7b:ba:6e:39:94:2a:4a:3d:21:
         4b:55:96:6e:3a:39:ce:bc:b2:7a:61:15:4b:31:72:24:79:4f:
         0c:aa:8c:3c:6b:60:3a:ac:33:a3:16:3f:41:3b:e5:b4:f3:9c:
         dc:1a:56:b4:2e:e2:84:ba:03:a2:a8:85:ee:a7:72:b9:d0:6a:
         9e:50:f6:cd:63:a4:68:9b:bf:e8:4a:8a:4e:16:30:3c:d1:2c:
         70:99:48:a1:cc:a8:c4:1a:68:11:e4:c1:05:dc:2c:87:ef:90:
         b6:5e:8b:be:2f:ec:d6:96:7f:a5:11:7a:55:55:db:f0:1d:a7:
         1c:d4:3d:4f:2e:0d:07:7d:db:cd:bf:19:48:eb:7f:d0:33:a1:
         85:6d:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----