Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
File:                     uG3av8SJUr7ibW1fgogx9ZahVOk.cer (raw, json)
Hash identifier:          0g1Fla39X8V5NBQwFvmhDcKC7ZIsWtDnJBbcJPQV6FQ=
Subject key identifier:   B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA696793CDEC34BE90A075E5BBF256
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214829
                          IP: 2a14:59c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:69:67:93:cd:ec:34:be:90:a0:75:e5:bb:f2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:df:7f:af:00:de:0d:d6:f0:05:42:80:51:61:
                    f6:97:ff:9d:0b:af:b0:af:dd:9f:fc:3c:bd:e7:8e:
                    1b:83:b5:e2:c7:04:13:3f:fd:35:31:6f:b4:98:98:
                    1f:0d:1d:41:f2:ce:57:62:99:f4:96:3d:48:17:d6:
                    80:98:b2:17:cf:c5:d7:2a:b3:e4:2a:77:02:4f:b6:
                    0a:99:06:1c:66:c7:74:39:f6:3f:cd:e4:1d:1b:f4:
                    80:6c:34:20:4c:ae:4b:41:a2:22:21:d7:8c:5a:3e:
                    dc:62:9c:08:a1:c8:51:97:38:aa:5f:5f:4f:1a:4c:
                    a5:9a:4e:5e:dc:34:b8:67:ac:d2:b2:09:c3:57:30:
                    eb:5f:47:37:aa:7f:21:95:2e:ef:de:b7:e2:33:fd:
                    67:52:c9:2d:30:81:30:ee:a3:64:ed:f2:04:dd:c8:
                    0b:76:ec:9b:03:da:78:96:1b:c2:b5:e5:c5:7d:65:
                    a1:3f:70:bd:be:6b:5a:ec:36:ae:f4:ac:32:28:37:
                    60:44:22:a4:7f:11:99:4b:e2:5a:85:9b:d3:a9:4e:
                    8b:3d:63:08:74:b3:a8:9f:d9:34:7d:0f:ac:57:ed:
                    d5:ad:54:4f:79:f2:07:04:10:3b:9c:fc:15:28:6c:
                    97:ef:fa:ff:a8:0f:3a:63:df:05:61:af:b2:ca:2d:
                    4d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:59c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214829

    Signature Algorithm: sha256WithRSAEncryption
         76:a8:b5:ee:bb:59:98:79:47:7a:fc:29:8c:28:11:8e:bc:51:
         ce:6f:d5:cc:fc:42:36:ec:18:72:69:5b:1c:fe:a9:fe:1c:34:
         dc:ee:71:e0:d1:23:2e:57:e9:03:62:ee:a6:e2:a0:4e:08:92:
         e8:bb:3e:a5:1f:47:53:d2:f9:57:e0:d2:84:cd:fb:9b:95:65:
         d2:55:04:42:b1:c5:c5:ee:92:2b:d2:c1:0c:d7:c9:6d:38:1d:
         83:5e:8e:c0:38:09:93:5c:a6:33:95:7e:49:72:47:04:ea:b9:
         67:fb:be:3f:62:b9:22:fa:48:bd:5f:a0:2e:2b:82:3a:7d:05:
         5c:14:c9:2b:e8:50:25:4e:92:c9:fe:46:e6:d3:e5:93:b7:cf:
         65:2f:87:4f:d8:c2:18:5d:bc:27:5a:e8:4b:36:4a:7f:de:64:
         83:c2:d2:a6:62:f9:f9:e9:76:c6:11:04:88:06:6e:0a:29:80:
         af:9a:ad:15:4f:00:a9:ca:3b:e6:75:e1:aa:23:a7:fc:8c:df:
         24:8f:18:10:69:bd:b1:9b:d2:cc:4d:2c:85:67:e0:9a:e0:9b:
         c6:74:51:f2:3c:07:68:2a:e2:a8:8f:94:22:78:bd:f5:54:46:
         0d:07:f0:6f:8a:75:5e:e6:59:80:21:e1:7e:be:3e:28:ad:9a:
         bc:60:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----