Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
File:                     x24D_30L_eMoOcKP7IHGJ1wE0z8.cer (raw, json)
Hash identifier:          CiFZ/TlmqpVXzuqyRt6NT7/6RB+VxLy4M+qFQpVpx5g=
Subject key identifier:   C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942669F4E5690E7F298BDB0B62FF36B080
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200934
                          IP: 185.107.120.0/22
                          IP: 2a00:cb40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:69:f4:e5:69:0e:7f:29:8b:db:0b:62:ff:36:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:db:c9:2a:dc:d7:54:a1:cb:31:d5:35:ac:
                    5a:62:3b:23:55:9b:0c:69:99:44:05:37:f0:27:71:
                    eb:8b:55:be:5d:8c:1b:b1:d0:11:8d:f2:7a:99:8e:
                    63:b2:85:ac:42:e3:8f:c8:90:60:9b:52:f3:b7:b2:
                    e9:5d:ad:de:1f:40:a4:65:ce:17:71:f1:0a:58:5b:
                    d7:7f:eb:89:dd:3d:46:c8:51:5f:5f:e2:39:2c:8c:
                    2d:d1:e9:5c:07:6e:65:02:c3:6a:29:1b:65:a7:53:
                    3f:d2:2a:2a:9c:81:65:36:9a:ca:18:45:fd:eb:86:
                    e6:ad:ca:b3:4f:97:57:64:8b:97:55:87:09:f0:ff:
                    f6:61:c3:e0:5a:36:ea:aa:69:a9:77:5c:d2:16:8c:
                    6c:2c:46:07:72:5c:54:3b:65:f8:dd:7f:88:4c:c1:
                    69:5f:c6:7b:9b:cc:b8:4c:39:8e:6e:f1:04:da:e1:
                    58:22:8c:95:f8:f2:9f:0e:0c:96:b8:63:a4:77:ca:
                    c4:02:db:6d:82:23:81:ee:49:c7:2d:21:1c:f2:4d:
                    be:a1:47:50:e4:6c:75:aa:ef:4e:2c:4f:ae:3b:9f:
                    90:07:7c:d9:aa:51:8a:d8:c4:8a:4c:25:aa:63:83:
                    d9:46:d1:79:33:20:db:f5:ce:07:6e:da:58:dc:c0:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.107.120.0/22
                IPv6:
                  2a00:cb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200934

    Signature Algorithm: sha256WithRSAEncryption
         ab:11:23:20:8b:b6:83:40:9d:4f:e7:a8:5a:14:17:37:43:f8:
         67:85:5b:34:16:4a:21:c6:fc:02:1c:42:4d:04:59:25:ae:1e:
         09:6b:b6:c4:cb:6b:9a:3c:89:97:e5:26:31:00:51:50:d0:ca:
         7c:e4:e2:89:f4:aa:39:1b:37:e5:d9:ae:fb:8d:d7:b1:be:40:
         a7:76:7d:b0:f5:82:37:83:ad:67:59:75:b7:5d:04:e4:41:63:
         ac:68:90:dd:63:7e:87:9e:23:33:aa:d9:df:cc:44:bb:41:bd:
         a7:df:43:e3:0a:2b:f9:04:36:77:bb:db:b8:16:2b:7e:46:1f:
         68:2f:30:82:88:ec:2c:3c:2c:fa:6d:ff:66:44:bc:6c:c5:76:
         58:d3:90:c4:98:78:d9:a6:f0:3f:c7:f3:6a:d7:c7:06:83:e2:
         8b:f8:b7:28:c5:ba:2f:b9:fd:83:b8:53:a4:7d:69:02:1d:90:
         e7:33:ca:56:d5:d9:6c:38:d3:87:8f:b2:75:dd:2e:af:f5:61:
         d7:d2:2e:fa:55:f0:62:20:c5:5e:de:22:37:9e:47:13:f9:90:
         4d:f0:1f:78:25:57:9b:b6:e7:7c:16:24:9c:9b:d4:d7:92:3f:
         29:1b:8f:ae:9d:1f:17:8d:d3:a5:0e:19:e2:71:bf:00:25:09:
         47:ff:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----