Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
File:                     59eZrg792Ybd53-zWtChCCPLly8.cer (raw, json)
Hash identifier:          G7knR/ChKV1vKqtZgO0lyxV3jAqnBLK0AprRsxYhKro=
Subject key identifier:   E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F6C3BAAC9B983E77951CB66849769
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 3261
                          IP: 2a02:300::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:6c:3b:aa:c9:b9:83:e7:79:51:cb:66:84:97:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:61:ff:a0:48:70:d6:2f:a8:e8:8f:81:cb:
                    b6:6b:23:5c:13:c3:6c:38:ca:d1:95:62:e5:d4:8f:
                    53:96:0c:41:71:e0:e0:90:c3:29:c8:2d:c2:17:8b:
                    31:f8:ae:94:8f:fa:e3:e3:25:b1:2c:a7:c7:37:93:
                    fb:eb:25:a9:43:38:1e:e6:ee:a9:66:ab:05:ec:4f:
                    a4:16:9d:e0:35:49:55:cd:0e:57:91:91:df:d7:e4:
                    ac:ae:b4:a7:96:a7:8e:9e:9a:41:5f:78:ac:87:3a:
                    00:a8:07:f2:06:b9:34:d7:a5:63:f1:a4:27:29:bd:
                    c0:a8:3d:96:37:2e:65:f7:d1:b8:50:13:cd:17:44:
                    3c:4e:e5:39:d6:48:2a:1d:e9:6d:22:d1:62:b5:20:
                    b9:4b:0f:e9:bc:59:88:bd:2b:72:19:0f:59:34:bf:
                    42:69:24:e5:76:fb:6d:d3:f6:42:43:81:84:db:9a:
                    b3:54:29:46:70:3b:f0:fc:51:7f:5b:11:1b:d8:f7:
                    f4:83:5d:04:2d:e4:8c:d8:38:76:ee:43:26:81:6e:
                    33:3b:f7:c4:c0:a9:72:a6:07:a9:f3:c6:20:77:bc:
                    a8:ad:c2:70:b1:2a:7f:c9:f1:cb:94:84:1a:ad:09:
                    73:cd:ba:27:14:1d:3e:7a:d0:1e:85:04:bb:d3:7f:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3261

    Signature Algorithm: sha256WithRSAEncryption
         81:81:a3:4d:21:4e:f9:59:40:d8:11:e1:01:eb:9e:64:c9:da:
         2e:e5:54:79:b0:55:48:43:43:c0:50:8b:63:37:9c:4b:f0:f6:
         da:bd:ef:11:e7:b9:f5:3b:4c:2d:54:ba:52:7b:98:2c:51:92:
         9a:f4:5b:7b:de:4f:cc:59:26:42:ee:3c:08:50:4d:61:25:10:
         1c:5d:9b:2f:2d:51:8c:ac:d3:12:ae:7c:bc:64:39:52:d4:5d:
         d5:82:31:ed:42:3a:84:2a:9d:f5:9b:d5:f5:eb:4e:99:d5:7a:
         d2:fa:29:47:df:2f:c4:bc:2e:07:8a:47:ad:00:fa:d6:9e:2f:
         bc:23:f0:7c:79:a2:f4:27:3f:02:c0:1d:9e:12:7e:fe:1a:37:
         45:77:76:37:5a:e1:36:47:e3:c1:79:46:ca:aa:c5:e1:27:b2:
         85:86:7a:9d:6c:2a:09:af:0a:92:49:2c:d0:1e:3e:90:8d:27:
         5e:90:a5:f5:b1:c6:b1:34:3b:53:af:71:bc:df:96:61:39:98:
         48:66:64:5b:5c:51:02:29:1e:68:9f:c3:36:4b:27:c4:c3:02:
         3f:84:a5:46:33:4e:7d:e8:f9:71:c1:59:d9:25:98:4a:5c:c4:
         d7:71:d1:eb:59:ec:6c:c6:32:ba:05:c1:a3:e8:77:39:63:78:
         42:0f:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----