Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
File:                     4VuQ_9-gqyhUheeERrhxmYsk3MA.cer (raw, json)
Hash identifier:          7tJZHrJe217Wrcy9OrXlUm6vOrCBOnT0gfaPBy642gM=
Subject key identifier:   E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194CB7AF8E69A5E3A2DE5ADC7AF29CD694E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 03 Feb 2025 11:03:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 94.232.254.0/24
                          IP: 2a13:9ac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:cb:7a:f8:e6:9a:5e:3a:2d:e5:ad:c7:af:29:cd:69:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  3 11:03:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:60:cc:a0:1f:7c:b2:ea:ae:99:dd:b6:95:
                    33:1a:52:28:3a:cd:c9:3f:42:61:a4:2d:ab:90:74:
                    17:52:b8:01:ee:99:67:31:69:de:0a:61:be:63:ca:
                    a7:e3:ac:29:6b:5f:9b:c2:c7:be:11:56:04:55:29:
                    13:1b:95:64:c7:ce:1f:37:97:fa:a2:79:bd:f4:6e:
                    94:b4:1f:05:5b:1c:13:30:7e:f7:9f:90:a7:ee:6b:
                    e3:e1:c2:f3:3e:24:3b:d8:e3:fe:86:8d:00:88:43:
                    12:c5:41:6d:89:d5:0c:49:c1:b8:eb:1f:14:22:d4:
                    b8:57:3e:a8:83:f7:aa:93:04:e4:3e:e0:10:55:5d:
                    87:a3:87:f2:77:2c:26:2b:c7:d8:65:f7:0c:76:af:
                    07:aa:f5:03:be:69:c3:1a:b9:5f:5c:41:5a:86:08:
                    55:94:f1:1d:ab:bc:83:fa:97:58:6f:b7:62:9e:c4:
                    7f:99:1f:5c:31:a3:38:83:7f:cd:14:fb:0c:fa:9e:
                    67:9d:ce:30:e3:02:e4:23:ab:f5:d0:7d:3e:75:f7:
                    ef:5b:2e:6b:24:5a:1c:60:7d:a1:af:88:88:a8:80:
                    05:b5:72:b6:0c:fc:a3:62:cc:cd:99:54:4b:dd:26:
                    2d:2a:91:97:d1:bf:4d:0f:28:9a:92:23:ea:17:e7:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.232.254.0/24
                IPv6:
                  2a13:9ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:7e:35:2c:68:2a:70:f2:98:cb:e1:b5:10:a1:78:68:a4:
         1d:1e:59:32:77:6c:de:14:62:8d:d4:d9:5c:73:ab:23:ef:2e:
         51:f6:95:43:f9:b9:bf:d1:66:64:96:49:7d:df:51:de:b5:00:
         76:69:1c:a2:85:dd:6f:55:76:e1:5f:b3:26:5f:a3:ac:76:f7:
         26:24:70:c2:80:9e:cf:98:ce:30:a5:22:0d:67:ee:ac:62:a0:
         54:4a:0d:29:7e:b2:e9:c3:71:68:7a:31:d0:4b:db:0c:ea:e5:
         86:7d:69:5c:66:5f:f5:71:f1:d8:29:c5:0c:d2:b8:c4:76:4a:
         43:59:92:84:ef:86:3f:dc:e9:09:c8:d4:61:c3:27:bd:60:b3:
         dc:68:26:b3:f7:d7:2d:ff:74:f7:17:1d:14:a9:54:70:fe:fe:
         3c:50:41:08:1a:d8:ff:e8:88:10:d9:a3:5a:c5:4a:04:94:03:
         51:3f:8b:b8:7f:6c:58:ba:2d:d9:08:cb:0b:6c:44:28:82:37:
         e2:a7:bd:8b:16:79:f7:f9:69:cd:66:ad:6c:c0:27:65:0a:bd:
         ea:17:3a:a3:1e:fb:74:b5:be:12:e3:66:a3:5d:b7:79:8d:d0:
         73:78:b3:c6:54:92:6a:ae:83:bd:de:cf:ec:ee:20:55:64:d1:
         ad:3b:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----