Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
File:                     8mHfRLNGgjzOjGZDtfppGa-yMZU.cer (raw, json)
Hash identifier:          Sqvb7C5y1B8eBiMa4V7ioTBrTT5w1lIN2sgDXsCOIlI=
Subject key identifier:   F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BB003630A3752DF4AA3E1EAC89A36
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208337
                          IP: 45.143.180.0/22
                          IP: 2a0e:ecc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:b0:03:63:0a:37:52:df:4a:a3:e1:ea:c8:9a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f261df44b346823cce8c6643b5fa6919afb23195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a1:00:8f:4b:8b:d3:ac:19:f7:75:ff:b6:7f:
                    d0:3e:68:5c:31:97:13:23:bb:22:d7:15:0e:74:f3:
                    73:19:1e:64:f8:4a:4d:99:f4:16:01:68:32:20:ae:
                    95:fa:0b:39:2e:8c:e4:2c:10:df:b2:2c:24:69:d9:
                    f9:37:05:ea:89:ae:68:0e:77:1c:e2:0a:bd:d1:d8:
                    44:b2:5f:4a:e2:a1:b2:a9:6a:0f:4b:3c:24:c6:62:
                    50:cb:e8:b7:b1:f6:43:b4:08:97:76:44:5d:32:5d:
                    77:18:a9:cf:08:99:e7:4d:25:ed:51:92:62:b5:ea:
                    c1:56:cb:93:cf:1a:b7:bb:1f:bc:98:2a:b8:b5:7c:
                    99:f5:4d:40:d3:2a:9b:09:04:b0:5b:90:e2:8a:2f:
                    1c:27:10:36:89:25:ea:27:9d:76:4c:84:eb:e2:1a:
                    08:c8:b8:81:41:f7:7a:ca:e6:b6:c9:66:da:e7:01:
                    ae:b4:34:03:fe:e5:9c:3a:c8:a2:7d:dc:cb:dc:c9:
                    cb:87:68:2d:ee:24:5a:da:86:73:d6:05:35:48:5e:
                    17:9d:b6:0b:78:c6:3c:ee:a1:8d:16:86:64:30:27:
                    e2:06:c3:39:e8:2d:93:61:38:0f:56:92:e3:29:45:
                    54:ee:5e:33:33:2c:4f:4e:5d:e2:49:05:43:cd:e9:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.180.0/22
                IPv6:
                  2a0e:ecc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208337

    Signature Algorithm: sha256WithRSAEncryption
         78:10:7d:b4:75:7a:85:22:16:de:ae:e9:82:ac:64:20:38:5c:
         a8:7e:0f:73:c6:da:f5:a6:80:dc:26:e2:12:f3:bf:38:b1:56:
         0f:30:1c:f0:fc:83:01:59:ba:af:ae:a6:07:e9:31:6e:c6:b1:
         37:a3:7e:ce:76:7d:b8:e1:0c:2d:ef:52:05:d2:35:74:0a:55:
         57:86:e0:05:6a:95:d5:ef:83:a9:62:45:3b:60:24:92:93:9c:
         3d:c0:fe:ef:2b:ee:b6:27:3a:3e:8e:16:58:71:b0:9b:2d:41:
         62:86:c9:c4:00:59:c3:df:3d:82:19:ba:ae:ce:f0:5c:09:8a:
         04:f9:9c:76:87:fa:cc:50:8e:86:73:ba:be:c1:b3:dd:57:99:
         09:57:56:54:f4:e1:8a:b4:a5:b3:d6:8b:06:49:23:d7:4f:fa:
         cf:50:2c:2b:94:5a:fe:fe:ac:85:01:96:cf:74:af:c5:4d:0f:
         cf:86:cc:cf:98:e6:ca:9e:9c:35:12:09:a8:c3:2d:36:98:f3:
         32:25:c0:ce:e7:d8:57:52:e8:77:d5:a7:04:dc:f8:e6:3a:96:
         c2:a0:37:5f:a4:de:42:4b:ce:b6:3f:50:a2:a7:b7:11:3d:31:
         9c:c5:7c:0a:e7:3a:9b:95:42:5f:4b:7b:5a:b1:9c:97:37:90:
         2d:0c:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----