Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
File:                     lvLaL6G8jtLyvGtwOovxU0D5fPo.cer (raw, json)
Hash identifier:          rfqLwd+uohPsN71615eazLavBDED4UVEiDwS8GpCM5g=
Subject key identifier:   96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143FACF6DA3CAA5F0D64EABB8EE566D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197645
                          IP: 91.223.212.0/24
                          IP: 2001:67c:2130::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:fa:cf:6d:a3:ca:a5:f0:d6:4e:ab:b8:ee:56:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:53:b7:32:e1:10:be:b8:21:1b:12:5e:01:
                    99:8e:85:75:97:55:c6:ed:d7:e3:78:42:22:9d:56:
                    e9:5f:6b:f5:bd:be:a7:a1:b7:ba:55:53:b4:57:40:
                    a6:b0:6b:d3:6e:9b:5b:5b:2e:c5:f9:0b:44:a2:7b:
                    89:08:c1:36:6d:73:c1:ed:80:55:33:3c:92:5d:1b:
                    45:28:cc:72:86:0c:41:58:c7:56:d0:71:e4:d2:c6:
                    8c:5a:1f:36:a3:34:54:92:4d:01:5b:db:97:81:57:
                    a3:4f:f0:33:34:17:03:6d:78:40:a7:e0:dd:f4:c4:
                    18:c6:6c:40:c8:68:0a:52:b6:a8:28:42:0c:f8:41:
                    bc:fb:54:f1:55:ac:ae:76:32:fe:f4:af:8a:05:a3:
                    47:88:57:47:bc:28:e2:e4:12:73:3c:66:a2:9c:b8:
                    77:61:26:54:ad:54:1b:f8:31:1d:c5:40:30:98:a1:
                    cf:99:f3:fc:dd:7c:fd:3a:74:a1:da:a1:9e:dd:7c:
                    9d:c6:f9:9e:80:bf:45:f5:8a:f3:eb:69:03:ab:f4:
                    75:93:26:90:cf:5a:38:fa:5a:76:23:10:e8:e1:18:
                    e8:21:e6:e8:1e:e9:c7:9a:0f:6c:87:94:c9:02:0a:
                    1d:5b:dd:ae:1f:96:61:73:30:8b:e0:0c:0e:e1:34:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.212.0/24
                IPv6:
                  2001:67c:2130::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197645

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:3e:25:9e:16:ab:0f:4a:30:37:b1:36:0d:75:06:5c:79:
         b3:4d:fb:c2:10:e3:ee:28:f0:d4:91:9a:55:50:5f:1b:bd:f4:
         fc:2b:65:61:41:e1:f5:0c:e6:ca:93:8d:95:4b:40:b2:31:4e:
         33:45:92:b4:ac:bf:d0:f5:d2:e6:84:79:5e:ec:04:88:58:3f:
         8d:64:ec:95:11:9e:10:51:f8:c3:97:82:09:2c:d6:42:16:d6:
         a4:80:84:93:2d:57:f3:3c:bb:25:c7:9f:68:f3:b9:e8:4c:ca:
         cc:b0:a8:a1:35:38:92:6c:1b:76:00:aa:e1:7a:d8:01:a3:88:
         5e:9a:2e:3e:93:3b:43:7c:dc:26:fc:78:3e:4e:d2:00:93:6b:
         6c:86:25:23:42:cc:c8:46:ce:ed:8b:d1:63:c5:30:e9:5a:07:
         66:1c:a1:d2:b5:29:24:37:bc:92:76:85:75:af:52:da:fc:45:
         c2:3a:7e:45:11:47:51:79:30:2c:cc:b6:56:2f:ff:3a:eb:c9:
         37:b3:1e:94:1f:38:5a:38:55:61:28:c8:d8:00:0c:e9:00:e3:
         55:35:15:ba:27:c6:8a:a7:78:f4:8f:24:84:c6:4a:9b:29:1b:
         9e:86:e7:39:bf:93:b9:47:ea:c9:5a:bb:b0:38:f8:12:62:bb:
         5f:94:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----