Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
File:                     i96i1KsTgPCjt_59T6eCjhyUNVg.cer (raw, json)
Hash identifier:          c8l9EDwsep3k+niXNABf5crk+88G00Z6mJbSmu02eXQ=
Subject key identifier:   8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5BE4FFB874D19B1638D3D8F30EE92
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204356
                          IP: 185.252.100.0/22
                          IP: 2a10:6dc0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:be:4f:fb:87:4d:19:b1:63:8d:3d:8f:30:ee:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:00:ca:bf:f6:1d:52:38:77:7a:44:db:6c:fb:
                    3a:f0:df:64:77:af:8d:6c:68:51:18:43:66:fe:62:
                    56:90:d5:1f:d7:0d:90:82:ee:e3:b0:28:6c:04:00:
                    74:ca:a3:4a:87:30:ab:79:bc:41:bc:66:12:dc:f2:
                    0b:7e:ef:70:41:c1:7e:48:dd:4f:1f:96:54:be:b3:
                    b8:5b:df:7f:ee:5e:55:11:c6:96:a2:53:1a:ee:62:
                    89:99:78:ba:20:e3:be:89:e2:a9:8f:84:1c:b6:08:
                    a3:11:63:c2:97:e3:02:57:67:2b:58:7e:8e:f7:96:
                    ee:5e:3a:6b:94:fd:97:cb:53:ef:f2:9f:14:51:2a:
                    71:91:2f:7d:95:02:85:bf:b3:bb:a9:5d:0c:66:b7:
                    82:e2:5c:48:06:64:8c:f1:0b:b0:b6:aa:d8:60:18:
                    dd:a5:7e:00:22:bf:33:2d:83:79:ed:63:e2:ee:02:
                    07:ac:24:2f:47:4a:df:c9:dd:0b:be:e1:b1:e1:e7:
                    06:a3:3a:50:24:b8:a7:50:ad:75:06:93:cb:92:8a:
                    ef:3c:2f:69:13:fb:84:7a:10:aa:1c:e7:0a:76:7a:
                    d2:32:42:f5:fa:55:ee:c5:7c:df:56:f1:f9:0b:8d:
                    4a:a3:78:7a:58:fd:b0:7b:b1:3a:bb:d0:20:d7:51:
                    2d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.100.0/22
                IPv6:
                  2a10:6dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204356

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:ad:0e:8e:d7:18:0b:b5:96:5a:96:fc:89:c4:4e:74:21:
         de:2d:8a:2e:83:40:1e:d1:98:84:c5:79:39:6f:a8:38:74:43:
         3a:da:9e:41:7c:9d:fa:2a:e8:8a:9e:a5:d8:39:04:29:15:51:
         95:25:7e:b1:76:fc:bb:31:0c:28:b4:29:b2:6a:8c:06:d3:44:
         d5:93:94:9d:d3:5e:9d:73:98:93:a7:e4:41:34:86:2b:ba:a8:
         b5:01:b6:87:95:2e:d3:3b:23:d7:02:cf:98:af:f7:9b:d0:8e:
         50:cd:39:c6:1e:47:6f:ac:ef:b4:70:fa:63:f7:9b:50:9b:40:
         70:f1:a6:c8:d3:6e:e4:2b:d2:89:62:59:ac:d6:8f:b4:6c:55:
         c2:20:eb:ce:b4:af:a3:3a:24:58:92:e6:04:bb:c9:ac:fa:fc:
         07:91:66:de:49:d4:30:9f:8a:4b:70:25:b6:19:a0:ff:d1:61:
         70:d5:96:ad:15:40:53:1d:7f:df:50:3c:b9:59:85:66:11:b2:
         72:fb:39:89:2d:f6:84:50:02:b4:a3:44:a1:f7:7b:05:07:9d:
         fb:d6:b8:25:7c:07:f5:f0:0d:d8:d4:e5:c6:7c:fe:e6:f2:ac:
         62:d3:b1:0a:cc:41:9c:55:28:a6:a9:9e:4d:d3:04:f1:d7:9d:
         e1:89:46:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----