Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.cer (raw, json)
Hash identifier:          f9yhzdkCOKdrN93lYIhkOSENxmT5N8pGA15PRn9H5HQ=
Subject key identifier:   FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F74EDD8A0CDC46A401668F1ECDF43
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.202.151.0/24
                          IP: 2a14:2c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:74:ed:d8:a0:cd:c4:6a:40:16:68:f1:ec:df:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:c8:54:e1:c2:94:9e:3d:96:ba:58:4b:43:
                    b7:b5:9b:85:9b:a5:db:10:0d:d4:b5:7c:46:5e:1b:
                    7a:44:19:64:3f:21:3e:70:bd:30:3b:32:85:f1:0f:
                    ab:ff:1b:a5:a8:ec:bc:07:94:79:14:cf:a6:b2:e5:
                    33:a2:ea:16:c1:f7:b5:b2:03:32:56:47:c0:a3:64:
                    cd:3a:71:75:59:38:b0:d0:88:3f:30:b3:37:d5:c5:
                    6c:f3:0f:aa:49:f8:2e:07:5c:21:51:a2:1f:4b:d4:
                    26:a5:bd:c7:74:2c:6e:3b:b1:3e:4b:b9:01:97:16:
                    7e:a4:f9:e2:c5:02:d1:d2:bb:25:bd:1a:a1:6f:65:
                    cc:17:13:3f:13:c0:2b:be:15:1c:c3:7a:48:fb:7c:
                    01:17:f3:65:89:06:95:af:36:ec:ee:3a:8d:60:fa:
                    33:f9:d5:3a:81:d5:78:e2:81:4a:ce:80:a8:1e:ca:
                    8b:2e:4e:1f:5d:38:00:24:ac:92:1f:0a:88:8c:0f:
                    e9:e4:cd:00:01:bf:70:6f:cb:1a:72:c8:b2:9b:e3:
                    ab:b9:57:5c:a5:67:cf:8f:db:81:06:4c:60:9c:27:
                    53:b2:90:23:38:5d:a8:8c:c3:c5:75:a3:f6:4d:fb:
                    40:1e:c2:b5:70:c7:24:31:2f:8d:cf:a4:db:dd:a5:
                    b5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.151.0/24
                IPv6:
                  2a14:2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:c2:1f:52:70:31:62:1e:84:9f:47:d0:d0:2d:4c:e9:e1:
         f9:49:2c:4c:26:d5:72:45:67:d9:9f:32:36:0a:66:8f:33:e4:
         a0:38:1d:c4:74:68:de:71:c8:98:d8:d5:7e:0b:dc:1c:d9:33:
         7c:61:c8:df:19:c0:ec:28:96:af:8e:fe:a1:19:b2:49:d6:01:
         8c:f3:5b:0c:d3:01:1b:73:d8:d0:9d:14:c2:fc:81:ca:ce:bb:
         e9:f8:ec:41:04:30:3f:fb:fc:14:25:64:f4:eb:af:38:0b:e5:
         3f:9e:3c:b8:02:0c:f0:96:e0:4a:0f:19:5c:a0:ee:75:05:26:
         07:7e:72:5c:8d:8f:ab:8d:4e:42:25:58:29:22:32:5b:e9:d0:
         f9:86:7c:89:73:fd:49:d4:6c:14:1d:40:e5:8f:24:09:9e:27:
         6d:dc:3a:1d:11:6f:80:8f:3c:33:6c:f5:5c:70:70:e1:75:b4:
         56:23:ac:57:2b:09:92:5d:93:0b:92:7d:87:ce:e5:3f:30:d6:
         ba:8d:46:f4:47:cd:5a:c1:1e:1d:5a:d4:16:91:80:5c:31:ed:
         4e:d0:fb:6e:27:2a:5f:ec:37:8d:d2:1e:3f:3f:c1:11:a7:ca:
         5a:93:9c:52:4d:85:0c:ed:d9:60:61:06:34:03:6a:37:ca:05:
         7e:4e:21:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----