Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
File:                     XmFA8XMSeE72KuO-AwwMLMZhpwI.cer (raw, json)
Hash identifier:          fQKIIth2ismA4eFJh0Eq16MjJ/T6sofW8WOS3Rzbwag=
Subject key identifier:   5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194222025315DAC5234AC3CABB75C6929F7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206638
                          AS: 206963
                          IP: 91.211.88.0/22
                          IP: 2a0c:71c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:25:31:5d:ac:52:34:ac:3c:ab:b7:5c:69:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:c2:18:69:85:c4:5e:96:8a:68:a8:cc:3a:
                    57:c0:81:ae:7d:55:fa:c7:f2:6b:34:9b:7f:46:c1:
                    9f:58:ed:8c:14:b1:25:b1:52:d0:3a:95:bd:9b:f8:
                    bc:74:9e:5e:ab:5a:47:7a:9f:0d:69:8b:6b:14:d3:
                    fa:6c:f2:26:5c:75:36:a4:61:4e:fe:74:c0:02:d6:
                    6f:0f:64:79:10:9a:e8:d7:97:bb:07:a0:d2:d7:eb:
                    fb:49:24:9f:dc:70:e9:74:f3:80:96:31:16:c7:08:
                    82:c0:69:49:91:58:b7:b0:56:13:7a:b5:d7:67:2d:
                    5c:ca:90:05:98:3c:8e:d5:11:01:bc:6f:55:58:d5:
                    f7:95:ae:f5:9b:2b:bc:75:65:56:24:ef:1b:47:5a:
                    e6:60:3d:f6:62:0c:5a:67:99:85:28:85:53:e6:d0:
                    90:0e:68:53:4a:32:fb:f4:cf:52:05:a6:86:cf:24:
                    a9:05:41:95:cd:b5:c5:29:93:97:7c:75:32:08:dc:
                    06:0f:78:b8:72:c4:76:df:a5:27:fe:7c:e7:7e:df:
                    23:84:71:80:60:a5:ec:25:88:fe:99:0b:9e:27:9d:
                    39:b6:81:e6:d6:97:f5:f1:e4:39:9c:77:86:2d:05:
                    4c:5a:d3:89:d9:0f:da:89:75:83:5f:4d:07:6f:2b:
                    f9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.211.88.0/22
                IPv6:
                  2a0c:71c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206638
                  206963

    Signature Algorithm: sha256WithRSAEncryption
         54:a4:5a:8f:04:72:4b:ac:39:e4:a6:49:f3:9c:c2:85:6e:18:
         24:c9:49:66:84:bd:83:53:f8:98:fb:47:9f:de:11:bf:45:dd:
         10:21:1e:2a:47:ce:96:4d:aa:89:43:a3:52:bf:cc:5d:5f:50:
         ff:ee:6c:3f:f7:4a:22:c7:8a:e2:e9:3e:c9:38:c7:e1:1a:6d:
         bd:bd:7a:4e:30:03:84:b9:7d:33:d0:56:f1:36:20:db:8d:02:
         e1:f4:2f:12:64:0c:d9:8d:cf:a5:e6:8b:72:65:d1:d8:81:01:
         8a:89:e9:17:c8:88:c8:8e:9f:e4:9d:28:b1:13:7c:d8:83:c9:
         4f:d1:34:77:d2:77:d3:be:5b:fe:96:ce:6b:b6:b0:0e:95:b5:
         2e:94:1c:42:46:92:14:03:75:d2:5a:ed:99:ff:89:da:31:0f:
         94:74:8f:2f:85:8a:f5:30:f8:18:f0:2e:c0:20:01:43:cb:a3:
         57:8c:72:19:5b:df:3c:18:f5:13:c9:bb:23:68:f3:42:b2:a9:
         14:8f:be:3d:69:3d:f7:f1:4d:87:42:a6:f6:09:6e:ce:90:ec:
         c0:7c:50:2b:53:c5:2f:8e:0d:ff:69:17:6d:3c:6c:78:a0:fc:
         80:cc:ee:0e:59:96:f4:a2:69:15:4e:4b:bf:89:a1:40:4b:cb:
         3a:e0:1d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----