Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
File:                     G2RtQs6J1Ak-Ssknp_I283pRq-I.cer (raw, json)
Hash identifier:          dy+IDb6N71PkA0+GKMIncFRypQ/5KrSA6NONfCCtVeA=
Subject key identifier:   1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258E7DD4D32533E7861F429516FF9884
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203546
                          IP: 91.206.46.0/23
                          IP: 2001:67c:2f30::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:7d:d4:d3:25:33:e7:86:1f:42:95:16:ff:98:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:b5:a3:7a:66:be:73:8a:e9:41:f5:e4:72:
                    8d:22:9e:45:68:d8:60:a2:d9:df:0c:66:39:de:62:
                    85:e7:16:57:1f:a7:7a:86:9c:07:69:3f:62:26:ec:
                    c4:9c:1f:48:02:b8:fd:aa:61:23:ee:26:c6:4d:01:
                    a6:c1:85:48:8d:00:52:d7:6c:af:22:ea:50:4c:1c:
                    43:4f:3f:42:c1:dd:1a:d0:fc:a1:de:51:aa:70:07:
                    ae:09:21:92:d5:d4:e5:6a:e2:26:6e:e1:1b:18:a8:
                    25:d3:81:bc:82:9d:54:6c:8d:52:50:dd:55:f8:b5:
                    b5:e3:14:d4:92:f1:11:fd:fd:60:f9:a2:84:80:10:
                    e7:a5:31:7a:f2:55:91:cd:ca:a0:a4:a9:30:d2:68:
                    ea:0a:aa:bb:a2:65:38:a0:77:c4:10:4e:11:fb:10:
                    ae:86:4c:40:c5:58:92:e3:d6:7e:3c:89:72:43:c2:
                    3b:df:71:ad:3f:6d:4f:34:ee:c7:0c:ab:6b:f4:be:
                    33:68:a6:a4:89:ec:a5:ff:b2:b1:49:4b:5b:9e:5f:
                    df:39:3c:0c:f9:44:5e:4f:a5:b7:d0:d1:18:c9:81:
                    9f:4f:c5:c6:f9:2c:8c:f8:5e:e0:55:b0:8e:ff:38:
                    55:0a:1e:78:3f:89:16:a7:77:2a:d7:fa:d8:3c:bf:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.46.0/23
                IPv6:
                  2001:67c:2f30::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203546

    Signature Algorithm: sha256WithRSAEncryption
         10:44:8f:50:2d:1d:89:0e:7f:09:eb:33:d6:ab:1e:26:cb:f1:
         ff:0f:f1:1a:13:0a:f4:c4:db:85:26:b8:bb:52:8a:12:18:ab:
         cd:79:5b:25:22:74:99:88:c9:61:10:f9:c4:0d:ae:09:eb:e2:
         86:7d:67:aa:df:22:7d:b9:5b:48:d7:e2:ec:e3:c9:eb:8c:5c:
         7f:e7:25:e1:b5:b9:56:31:5a:0a:05:47:84:3d:4e:6b:43:42:
         38:35:c0:43:9e:75:8b:ba:38:65:91:dd:eb:56:6f:56:ab:41:
         cc:f0:6f:a3:cf:42:a0:2d:58:f9:13:19:2f:51:ad:38:6b:95:
         08:38:59:72:dd:9c:33:cf:de:e2:2b:01:ae:29:bb:3d:5d:c9:
         71:4a:f2:e5:d8:c9:2c:fc:ad:b9:fc:aa:07:62:98:69:38:5b:
         a3:64:f7:7a:bd:45:8d:bc:75:fb:11:98:1d:c0:d5:17:54:2f:
         3d:a4:fb:4b:77:61:90:4b:68:f8:f9:e0:62:b7:5b:3c:8e:81:
         fb:da:7d:64:cc:89:c9:79:ac:8f:81:e2:52:fc:78:28:d2:c5:
         a4:63:d4:79:b8:ea:09:4e:ee:74:6e:3b:3c:a4:f3:78:d4:33:
         eb:1f:50:c2:e1:bd:ef:0f:6c:cb:5e:7e:70:bd:d7:ea:ac:6f:
         48:02:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----