Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
File:                     F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer (raw, json)
Hash identifier:          zU+NICjhy+8ES5zwnaEZqsOSUOE4l5neROJHTpMZg00=
Subject key identifier:   17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D968D56FA8709B13785AAB242C2FAD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8458
                          IP: 193.93.156.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:68:d5:6f:a8:70:9b:13:78:5a:ab:24:2c:2f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=177005177526d668e844b2a7a5a59ac64a495652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d2:68:be:e9:00:cd:b4:f9:74:8d:df:6d:b8:
                    08:ca:86:2d:d7:a2:b5:56:da:af:09:89:93:00:b7:
                    e0:af:70:94:71:16:88:91:79:19:c0:12:e4:5d:76:
                    7c:9f:79:c4:c1:37:7f:b2:05:50:75:3b:35:94:52:
                    a4:83:1e:33:fe:02:c1:47:e4:8a:79:12:5c:c3:33:
                    e7:a2:9a:95:d0:23:66:75:e2:19:e5:f8:0f:c2:9b:
                    11:7a:26:20:84:c2:c3:25:11:5c:b7:de:ca:52:5a:
                    cd:2b:7f:c9:99:6c:d1:ad:8d:50:d7:25:35:16:e4:
                    67:a1:dd:17:3d:4c:c9:fe:15:5b:99:63:b0:9e:26:
                    a7:e2:b0:03:5e:0d:59:fc:b8:d9:2d:b1:ca:e3:d8:
                    05:25:fe:8e:c3:bc:5a:ce:88:42:a7:16:e7:27:3b:
                    66:82:4d:88:92:9d:60:14:d1:9c:9b:99:b0:fb:37:
                    a4:b3:5c:b0:fa:52:b1:72:da:0d:96:dc:0a:c6:3b:
                    13:a6:4d:d1:8f:93:1e:31:71:a1:29:34:a2:3b:86:
                    bb:93:46:b2:f8:4f:03:3a:c9:42:d6:db:7f:60:ad:
                    09:3f:38:22:1e:af:45:65:4c:42:ce:d3:05:a8:4b:
                    36:16:96:72:2b:c8:d6:04:58:71:67:28:03:8e:80:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.156.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8458

    Signature Algorithm: sha256WithRSAEncryption
         6e:cf:37:46:94:8b:a1:f1:54:98:59:ac:7c:c8:7c:48:fd:54:
         a3:f9:26:8a:54:f8:e2:45:27:4d:d2:a5:ff:17:2b:db:7f:f3:
         21:f9:95:5d:67:03:4b:bd:5d:47:75:c8:8d:b8:95:f7:ed:0d:
         14:1c:63:be:c9:93:bb:32:0e:43:31:fd:da:68:39:93:fe:db:
         5e:8c:d6:4f:2d:53:30:d0:ee:ff:bd:07:91:b3:a6:3f:64:85:
         b0:8d:0a:f9:7e:9e:88:a2:2b:85:cd:0f:e4:6e:03:f6:ec:fb:
         76:71:de:d1:86:1e:29:0e:c7:84:84:75:9a:4a:c4:ef:6a:43:
         e9:24:48:f0:91:7b:50:e4:a9:73:fd:d2:68:6d:39:21:3f:ec:
         24:83:ba:3f:13:ff:6d:d6:2b:ed:14:40:48:bb:12:e7:18:7b:
         e2:95:5d:70:1d:fa:27:15:b1:ce:f7:8a:1a:92:71:fa:c8:b4:
         7e:b0:a8:b7:a6:e8:a8:e9:06:9d:7e:a0:d4:2f:dc:d1:e3:b2:
         c3:d6:5c:72:95:96:e6:ca:fd:49:ed:ba:2f:38:97:ac:e1:12:
         d1:79:02:ed:5a:05:3d:b1:48:72:93:b2:89:c6:ce:ae:3c:50:
         77:df:13:1a:a4:b5:8f:b4:8a:5e:bf:81:f6:2f:2f:de:a8:58:
         54:e0:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----