Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
File:                     5miK6WMjwfz6tUspRVc5e0mwO8c.cer (raw, json)
Hash identifier:          /LYTK+f0kDd6eK2pKBgW5rP3gSKD6eoIm6dhMZGK8Ak=
Subject key identifier:   E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD0738A403DBBC98C46E8F2842069C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.146.40.0/22
                          IP: 2a07:4d40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:07:38:a4:03:db:bc:98:c4:6e:8f:28:42:06:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:97:e5:56:f2:61:9f:86:4e:89:57:20:86:
                    dc:07:8e:01:6b:00:dd:18:6b:3f:52:22:48:bb:f7:
                    29:bf:e3:a5:e8:f5:51:df:f3:e0:ff:b6:18:83:fe:
                    6c:70:6c:53:ef:93:82:39:9c:3a:22:4a:5a:3a:ca:
                    a0:07:de:f9:da:d2:fd:fe:b7:e2:ee:0a:72:f3:da:
                    32:02:f9:32:97:cf:31:97:b4:a6:f0:9a:79:21:32:
                    53:70:cb:8f:84:90:e0:9f:97:9f:a6:dc:e0:8b:a4:
                    44:31:b1:31:2e:84:de:5b:0f:9b:d7:80:3c:36:6e:
                    22:0e:60:70:a4:ee:82:e8:c7:fc:65:0e:b9:00:6e:
                    00:0f:c9:36:54:a1:25:bd:fc:e8:f8:32:5e:1d:82:
                    82:a2:69:a8:c1:e2:6f:2e:aa:4b:a2:2f:70:a0:ad:
                    46:a8:20:68:a6:da:0f:c3:1e:8a:77:29:50:c4:cb:
                    ac:ec:16:67:b8:07:d8:72:8d:0d:10:71:c8:cc:a8:
                    6e:73:39:b0:30:8c:f2:60:90:8f:d1:ea:83:9d:f7:
                    63:ff:97:38:de:c0:46:df:8f:c1:6e:b4:2a:88:e9:
                    8b:c1:c2:58:f7:3c:38:90:62:f4:0a:ef:24:dd:a7:
                    9f:8a:b1:55:93:20:d7:33:45:80:22:a2:75:82:c2:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.146.40.0/22
                IPv6:
                  2a07:4d40::/29

    Signature Algorithm: sha256WithRSAEncryption
         b1:9a:cd:dc:41:e6:f7:38:02:fa:ba:8f:39:4a:aa:e4:44:dd:
         31:a5:91:55:c0:06:fe:25:17:e9:59:2f:b5:0b:c2:52:35:a4:
         ea:46:77:b9:69:20:ed:2d:0a:4d:92:6e:5e:11:eb:bf:0b:ea:
         2a:d4:f9:f9:f7:01:b4:32:7e:4d:99:98:35:83:ce:a3:e3:4a:
         f8:41:2d:0d:f0:44:0f:e5:72:88:ca:49:0c:d3:21:5d:56:90:
         57:9e:d1:3d:27:78:17:3e:e0:ba:bc:4b:8b:99:66:14:86:de:
         5c:51:d4:b1:8b:ed:c3:33:b5:87:0d:19:86:52:fc:dc:47:ef:
         0a:23:2b:a3:f6:fd:b1:15:c0:83:34:78:61:84:a3:78:21:e5:
         aa:42:8c:f1:af:79:15:91:b6:80:09:2a:5d:f6:7a:f1:1f:88:
         18:3d:08:84:de:f6:f1:73:a5:68:36:94:ba:b0:ad:36:aa:5d:
         ea:b9:49:27:20:84:97:79:6d:c8:97:3f:fe:28:45:ea:34:cb:
         e1:37:b4:c9:c1:5d:18:a6:24:66:d8:50:2a:06:4a:e1:d7:eb:
         77:ad:0d:35:a2:51:63:ab:28:b6:7e:bc:2e:41:97:04:16:7f:
         79:53:94:6c:c7:f4:21:09:f2:f2:79:3e:25:cd:8b:9a:01:90:
         ad:64:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----