Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
File:                     t-0w6W6la5gOa3k9GobGLdXAvB8.cer (raw, json)
Hash identifier:          pdZNCwG5k+HuC5xb1YKn7tEgvMeczPZ3Vo9DZC2AY4A=
Subject key identifier:   B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FF9FE5321CE926074D3A4C7D6E58F9E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213208
                          IP: 37.200.85.0/24
                          IP: 2a07:5200::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:f9:fe:53:21:ce:92:60:74:d3:a4:c7:d6:e5:8f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:35:6b:5d:56:33:19:6b:5d:df:60:4c:89:
                    7e:21:44:ea:f8:12:f7:6d:4a:07:ef:1b:1c:e8:84:
                    36:01:16:5b:67:19:1f:11:0e:82:64:a1:92:fa:a1:
                    6e:c2:ef:49:cc:1b:e3:49:d9:1b:fd:bb:61:a7:0a:
                    b8:34:aa:d3:7c:6d:82:d9:2d:97:1c:3b:b5:c1:04:
                    78:ef:ff:aa:83:f7:7c:82:52:7d:76:c0:c2:e6:6d:
                    18:24:e8:b7:8a:1f:b4:78:af:21:0e:66:4d:9a:7e:
                    3a:4f:e3:d4:df:69:9d:9c:56:48:24:b5:8d:72:f9:
                    08:1f:6f:b2:60:a3:94:73:f6:69:3e:1a:dd:e2:50:
                    2c:b0:07:e0:b3:40:66:4d:d0:96:84:e3:fa:05:35:
                    84:a7:be:5d:65:42:f2:03:be:8b:e3:84:ba:83:38:
                    db:a9:20:cb:f7:5f:bb:8b:57:78:b2:1c:eb:61:c6:
                    7b:89:83:41:a7:1f:e8:c5:08:c1:aa:a0:e1:23:6a:
                    3b:be:7c:3a:93:b2:ad:69:27:5e:76:ad:5f:ef:d6:
                    72:a3:cc:b0:c0:9a:ce:f9:10:95:03:dc:9e:7e:81:
                    a4:2b:0b:ef:d2:17:c2:80:d0:8d:a0:c8:80:59:71:
                    08:39:fc:aa:1b:b1:60:15:b6:f8:41:f4:ce:64:ce:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.200.85.0/24
                IPv6:
                  2a07:5200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213208

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:63:62:5e:d9:3c:af:48:27:6d:6e:24:1d:57:ef:4d:90:
         ae:21:4f:6d:5b:cc:f5:a1:cd:9b:99:0b:7b:20:22:f5:ed:cc:
         02:c7:9f:0d:96:c3:45:b5:2c:b5:31:8d:79:37:8a:15:7b:d9:
         d8:c1:00:27:05:33:1d:53:88:09:1e:82:59:a2:84:e5:8c:7d:
         36:44:4b:5b:40:27:06:b4:4d:e8:f7:7c:d7:9a:97:76:30:c8:
         19:9e:6f:df:8e:65:ad:57:7c:76:51:51:a7:37:c7:dd:f8:f9:
         92:bc:7a:dc:a9:9b:11:0d:3b:29:82:4c:d3:06:5e:1c:94:ff:
         e1:10:b6:cf:38:e2:bd:97:c5:79:d5:d7:fb:3e:78:ff:c5:43:
         7c:22:c3:6d:2d:d8:44:8c:48:36:62:34:11:0a:13:01:79:38:
         b3:62:a9:57:0a:b6:8e:05:72:e3:45:84:39:15:85:ef:f1:10:
         71:8b:a8:39:80:3c:9c:94:ce:59:87:e2:95:39:df:70:3c:15:
         93:f1:39:d9:2c:56:93:c9:03:c7:c6:8c:1a:74:d5:0a:0c:62:
         91:9d:9c:d5:c6:c3:0b:b4:d1:b1:e2:fa:01:d0:3e:68:00:f1:
         8f:01:8e:30:d9:f5:53:c0:7a:a9:b2:1d:a7:1d:29:e3:d9:94:
         ae:39:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----