Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
File:                     dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer (raw, json)
Hash identifier:          2QYSQX/TDNCqmR55pXlCrUtb/Lwvvvz0RROvbj9G1eY=
Subject key identifier:   76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019473589904105CDAD25E5D545E24A57B71
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 17 Jan 2025 08:19:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213269
                          IP: 86.111.212.0/24
                          IP: 109.204.128.0/19
                          IP: 2a04:7000::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:73:58:99:04:10:5c:da:d2:5e:5d:54:5e:24:a5:7b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 17 08:19:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:c5:1a:c7:42:5e:ad:11:79:3b:3f:d3:6f:
                    8c:11:e4:f3:90:f8:51:bc:8f:14:9a:54:fb:77:fe:
                    f6:55:fe:50:38:ea:fb:d6:fd:e8:d6:15:a8:da:96:
                    9c:3a:24:62:68:55:27:ed:8f:0f:c8:37:a1:4f:fb:
                    84:8d:73:2d:6f:50:2d:09:53:44:c3:b5:75:94:ce:
                    9b:48:05:b8:e4:02:48:ec:29:59:15:77:6b:26:e0:
                    9c:52:72:76:c2:a4:bb:ac:23:c9:78:f7:e6:51:b9:
                    f8:df:f5:94:b6:28:db:3d:e1:57:59:5d:8f:3c:d1:
                    12:b6:c6:68:c1:54:89:12:39:75:12:a6:76:f2:c9:
                    25:ea:e4:89:79:3d:0e:a8:a1:64:4c:9a:19:e2:db:
                    f4:9d:b3:16:6c:65:99:a0:08:3c:75:4d:a8:5a:ec:
                    c4:30:57:1f:97:dc:b2:09:ce:98:35:2d:a0:3a:65:
                    ca:d8:8a:20:30:e2:d8:94:72:c3:f7:d1:3c:89:e9:
                    13:a2:fe:6f:af:d1:cb:f7:c2:5d:8a:5b:c6:25:30:
                    80:bd:37:ef:44:f0:03:d5:b0:0f:64:28:65:ae:c2:
                    17:ef:e9:09:15:52:a7:04:91:7a:25:7c:2e:1c:14:
                    00:ab:3c:04:a4:40:a9:b6:91:39:3b:fe:34:9c:47:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.111.212.0/24
                  109.204.128.0/19
                IPv6:
                  2a04:7000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213269

    Signature Algorithm: sha256WithRSAEncryption
         8f:34:ae:0d:f5:98:d7:d6:38:a0:17:fa:73:a6:81:39:74:a9:
         c1:b2:fc:80:39:0e:b1:6f:5d:cd:f6:39:51:58:47:f0:a0:ec:
         75:81:a0:75:e7:ea:34:61:5a:d9:b8:58:e3:26:f2:6f:3c:ff:
         75:04:fe:ef:03:81:f6:0c:4c:56:a4:c0:ad:e0:ee:45:15:39:
         b2:e6:95:e1:75:fc:f5:7e:d1:bc:08:81:5a:62:96:52:00:da:
         da:d9:04:77:96:b6:46:ff:04:ec:ac:73:4f:28:ba:0d:3a:8c:
         9d:af:8b:b6:2b:91:64:30:19:51:03:80:58:46:64:8e:18:5d:
         e0:68:56:8b:a6:83:b3:64:5e:d5:ad:4a:93:2a:93:52:d8:63:
         ff:c6:88:fa:46:35:55:e3:c0:44:6c:ef:c8:b8:5f:e0:cc:46:
         ca:fa:af:55:fa:de:54:0b:a4:cb:c3:20:b2:bf:b3:ec:a1:39:
         bd:54:96:8c:f1:94:58:c2:6f:20:09:8f:4b:79:61:b9:6e:e4:
         70:a2:9c:4b:5d:ae:e6:c7:42:d2:43:7b:02:48:8b:2d:45:35:
         d1:0e:0d:6a:9f:8a:3f:4a:e4:0e:74:25:4a:50:58:50:84:fb:
         a2:64:ca:f5:50:73:5b:b9:f3:0d:07:24:69:32:ab:27:20:a9:
         90:7b:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----