Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
File:                     1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer (raw, json)
Hash identifier:          u0LadKLpHo0igRjKNHFgE83C9PeY6zqLo/rwQBzRLgs=
Subject key identifier:   FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB1E33AAE2BF3F9A02B40D7B5FF327
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202421
                          IP: 185.204.176.0/22
                          IP: 2a0a:fac0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:1e:33:aa:e2:bf:3f:9a:02:b4:0d:7b:5f:f3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:5e:49:d3:cb:4d:d8:9b:17:6e:93:67:1c:
                    f5:f2:05:d5:40:02:56:fb:72:92:68:d8:a7:e6:fd:
                    3c:83:15:e7:4d:6c:a7:5d:5b:2b:54:f5:21:01:de:
                    c9:aa:e8:42:c3:3a:2e:70:14:28:ec:5a:76:34:ba:
                    89:2b:2d:e6:c6:10:ea:ca:32:ba:b9:6d:1d:2a:ef:
                    c5:38:e4:d6:8c:50:54:55:9c:84:47:81:08:ba:5d:
                    a9:e0:13:55:22:ff:dc:35:e4:6d:47:1e:9d:2a:62:
                    46:27:4e:55:d3:ed:1f:3b:6e:9a:d2:d3:63:c2:96:
                    05:94:5b:82:5a:a3:89:d9:9c:f1:54:5b:e8:04:b1:
                    ab:db:cf:a5:34:33:6d:71:09:c0:e0:e1:8c:04:00:
                    0d:f1:76:bf:cb:6a:55:1d:00:82:14:09:75:a7:92:
                    67:14:7f:7a:01:5a:9f:16:68:e1:a8:ab:9c:a0:bf:
                    49:9d:74:ab:ac:dd:3d:c5:b8:b1:1f:4d:36:af:2c:
                    ca:ed:e1:22:2c:cc:62:e9:9c:fa:38:8c:a6:24:2a:
                    2b:e6:fe:14:36:92:be:8d:4c:a7:65:88:4c:71:2e:
                    15:b5:6e:76:45:d2:60:69:2e:b0:35:f2:6e:93:08:
                    ce:1a:28:98:4e:ec:1b:5e:7f:33:e7:24:58:5d:77:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.176.0/22
                IPv6:
                  2a0a:fac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202421

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:f7:4d:18:89:57:fa:06:95:79:5e:98:dc:6c:4b:3b:33:
         e0:b5:57:d9:8f:e6:f8:c4:f6:16:1a:a4:c6:72:d6:1c:f3:84:
         8b:b1:7f:0f:92:a9:a0:aa:0e:2e:da:f2:e4:9d:4c:32:bb:41:
         da:ab:4d:fe:dd:84:9b:54:b6:13:d0:68:2c:4e:32:ea:9e:bb:
         da:5b:5a:aa:53:07:01:40:ba:64:62:40:fd:73:a7:c8:14:e9:
         91:1a:f3:35:73:1a:0e:22:60:6e:22:89:c5:d3:a8:09:8d:4d:
         a0:10:b4:20:ac:d1:3d:9d:12:13:80:f5:9f:75:92:61:25:dc:
         f0:59:01:ae:2e:ee:76:5e:bb:12:00:9d:54:d3:76:ec:10:a5:
         6e:f9:5f:2d:7d:10:29:59:1f:c9:f5:75:4b:40:cc:e3:25:68:
         11:96:fc:fa:91:86:fb:12:93:0e:8c:c8:6a:38:b1:1b:8e:df:
         53:64:44:de:73:b8:13:6b:7e:70:4a:66:59:06:0a:13:a5:74:
         ce:93:f9:8c:bb:32:cc:b3:5c:29:d7:41:e0:86:91:b8:20:40:
         1b:da:29:78:58:fe:4a:1d:a6:53:db:96:5f:d7:dd:8e:8b:31:
         d6:54:86:d2:81:7d:8a:39:82:64:3b:c6:e1:20:eb:a4:e7:69:
         04:aa:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----