Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
File:                     DFfLOh5T52Ke47nyZy1Fce-F0sg.cer (raw, json)
Hash identifier:          m8lV5DYSbrI4RzoBgNC+KFV6nqfmxXvVp7fE+doI9Ws=
Subject key identifier:   0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C6A7D9B28AD2E173C295DDE7AEFAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48137
                          IP: 94.126.48.0/21
                          IP: 2a02:f00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:6a:7d:9b:28:ad:2e:17:3c:29:5d:de:7a:ef:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:8d:91:84:c1:81:ab:a1:d3:8b:0f:eb:50:
                    f8:f2:57:27:80:de:20:5d:0f:55:4c:f6:33:1c:89:
                    91:80:3c:47:0b:f5:1d:85:cb:ec:de:bf:46:29:0b:
                    cd:43:8f:40:7e:b4:ea:b8:c8:7e:ee:b6:76:86:fa:
                    3b:b2:48:2a:36:94:04:63:11:f1:93:57:6f:6b:a3:
                    1f:3d:63:b1:4c:69:e8:98:69:6f:46:e9:24:22:06:
                    58:41:56:b9:60:2f:a7:78:59:39:b3:80:70:84:31:
                    0f:7f:1a:6c:8d:38:59:ce:f4:36:7b:54:59:cc:60:
                    d1:0f:de:46:f1:ff:ef:0c:43:87:c8:fb:50:cd:71:
                    be:45:81:95:a8:5d:12:cf:7e:cd:d6:38:d9:0e:94:
                    95:d8:91:7d:ae:c2:a1:1b:1c:77:a1:46:79:ef:2d:
                    e9:30:93:08:0a:22:72:4a:de:44:a9:76:fa:21:5f:
                    1f:c9:45:7b:5b:b1:2c:e7:27:92:a2:07:9a:d2:57:
                    34:71:cf:53:26:a0:91:5f:15:39:96:61:68:c0:52:
                    2a:72:5f:c7:5e:e4:f9:31:e8:50:9d:55:97:35:81:
                    d9:50:20:8c:db:84:05:63:6c:bf:b7:9e:a2:13:6d:
                    53:a0:90:26:79:1b:ea:70:06:38:31:c5:0b:26:f1:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.126.48.0/21
                IPv6:
                  2a02:f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48137

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:2a:99:0b:cf:d9:f5:27:a8:12:4c:f2:c3:01:c0:d7:b8:
         3d:ad:f1:03:67:be:a6:63:c1:cc:32:06:f6:09:f0:11:bd:d3:
         34:1b:64:ef:58:8e:05:d0:b3:17:41:c0:40:ee:b6:c7:e0:9f:
         d8:3e:de:10:9f:1b:20:c0:18:d5:3a:18:d1:7d:6a:b7:79:e0:
         0b:f2:80:1e:c5:e4:03:b0:c7:c8:73:fc:c7:00:6a:f4:44:02:
         13:2f:68:49:a4:fe:cf:3b:8f:d8:22:22:ec:c5:02:3a:d4:75:
         20:a1:41:b3:ad:ba:35:0c:5d:b6:03:30:d3:4f:45:26:aa:df:
         78:3a:5e:05:9b:49:3d:6e:f6:3e:60:88:a9:01:6b:e7:9a:a1:
         07:0d:c7:19:c4:31:b9:e2:a1:a0:64:ec:96:a2:79:c3:c9:53:
         6e:96:d8:0d:40:96:9f:4a:12:b7:39:32:5c:29:e7:9c:de:06:
         26:d0:13:b4:34:83:1f:d3:36:82:78:f9:b1:a1:d3:ae:ec:48:
         6b:ca:f7:f0:3f:6c:e2:45:56:d6:17:bb:51:ec:19:51:39:f6:
         39:46:eb:ba:8f:95:6b:b2:33:2a:c8:f4:19:0e:64:a9:15:16:
         9c:25:0c:7f:82:13:59:26:c0:b6:b1:a4:74:97:6f:23:63:5a:
         0a:83:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----