Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
File:                     4QnieMeGIlTIh1XkcXOYpVKkkEA.cer (raw, json)
Hash identifier:          3+xjKRm21C3octznR9A+P6FjosF8t8DqrZ8OVHOwGn8=
Subject key identifier:   E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD2AC47D0F59D1703B32A4A284D7C6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212226
                          IP: 2001:67c:b54::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:2a:c4:7d:0f:59:d1:70:3b:32:a4:a2:84:d7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e109e278c7862254c88755e4717398a552a49040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:48:cc:75:ad:3b:0e:62:e5:76:28:c9:90:
                    f5:90:a4:b5:d5:b7:e8:0f:6d:87:22:6a:88:c5:fe:
                    66:f1:dc:38:a5:99:20:86:96:85:87:42:c5:2b:3b:
                    04:c6:d4:0b:a9:6e:e0:9d:3d:eb:a0:9c:37:73:2d:
                    2a:fa:f1:5d:fb:6f:d8:f8:bf:3d:e5:f4:1e:f1:85:
                    50:98:1e:b2:8e:81:52:04:e1:e2:24:d2:62:e5:6b:
                    7c:c1:de:f2:e8:b4:d7:15:41:00:72:9d:02:82:d3:
                    42:d9:7f:e6:15:21:b9:2d:6e:b9:80:2d:2d:c1:5f:
                    05:39:c6:ce:8a:16:43:13:37:a2:81:40:7f:c7:5c:
                    83:f2:86:68:e7:00:f7:1b:4f:b7:e3:6a:42:3b:43:
                    19:97:05:6b:f5:04:4e:48:02:91:fb:b8:ec:ca:ff:
                    9c:38:b1:67:33:3f:92:db:85:de:c7:24:82:5c:0e:
                    3b:aa:ba:68:c1:ff:f9:74:e9:17:a6:29:4a:50:04:
                    8a:c5:58:a6:8f:0d:1a:1b:eb:da:b5:2f:44:7b:90:
                    a1:db:f5:12:fd:1e:8f:b2:5b:3b:29:f4:e5:7c:44:
                    f7:b9:7d:e6:13:3f:22:f9:79:13:3c:36:16:fc:42:
                    6c:52:f4:b3:cc:97:ac:ae:6c:59:60:b0:19:58:db:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b54::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212226

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:f1:3a:a8:37:7e:66:66:dc:82:57:ab:53:60:73:00:a6:
         d7:63:da:3f:03:04:0a:ca:aa:54:b1:c5:2b:e3:f2:7a:be:b2:
         85:3f:9a:a5:df:76:0d:f0:7e:da:e0:25:02:38:4c:17:6c:e1:
         00:d4:7e:a5:e6:45:c3:85:5f:05:88:a0:48:21:36:ab:47:5c:
         86:08:b1:10:73:67:44:d5:31:b9:eb:ea:50:a6:b9:57:63:9f:
         f6:57:1a:62:6d:bc:07:a6:98:be:37:f5:01:f0:37:09:0e:be:
         98:06:4f:76:a4:68:2d:5c:29:fc:4c:d9:69:a6:0e:b8:63:aa:
         82:31:9b:c4:de:bf:0f:c1:06:eb:3e:b8:2b:1a:34:bb:32:f3:
         bd:21:97:13:af:76:d0:b8:0d:a0:b8:4a:d1:8e:ff:06:1f:8e:
         1c:10:d0:b6:bc:3c:f9:a9:1f:91:9d:06:89:49:28:4d:1c:6f:
         ad:11:9a:51:12:5f:91:5e:48:bd:f3:c4:dd:b3:3c:16:33:b7:
         7c:e6:24:f0:24:d1:df:a6:f9:9a:c8:5c:b1:a8:78:44:a7:55:
         73:72:00:c7:85:ac:2b:1c:68:21:48:ca:02:90:0c:08:63:d8:
         e1:d9:a2:fc:5b:34:87:63:a7:88:b6:62:ea:0d:0b:40:c9:c1:
         14:c5:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----