Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
File:                     Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer (raw, json)
Hash identifier:          gtSSckeYIbfDO/FzSTW+HbpDSbx/crAV4Co5VDHgSHU=
Subject key identifier:   02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD8006B9F6B4296716D22779319D99
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.110.83.0/24
                          IP: 2a11:440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:80:06:b9:f6:b4:29:67:16:d2:27:79:31:9d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:72:0e:e2:56:72:2c:cd:04:82:c8:78:40:71:
                    86:b1:4f:79:5e:eb:70:8e:c8:f8:89:73:5d:ad:59:
                    ab:69:df:ce:55:9e:08:ca:1e:30:15:40:31:6c:90:
                    38:8c:a3:fd:da:f1:51:5a:32:7a:f9:b4:9a:dd:fe:
                    fb:63:48:07:14:a7:65:95:38:df:d6:ca:98:eb:8d:
                    e1:9a:c3:43:91:97:6c:8a:28:17:76:c2:a4:a5:d6:
                    95:24:87:97:84:aa:16:02:ca:c3:39:54:f4:42:e1:
                    44:0c:7d:dc:dd:7d:cb:fc:e5:fd:ea:f2:0a:77:66:
                    dd:70:02:d8:e1:dc:da:66:ac:55:12:c3:f4:e4:18:
                    82:30:8b:97:7c:1b:f6:45:7b:7a:0f:86:75:ac:7a:
                    08:75:aa:fe:87:b6:65:4a:55:80:07:31:c0:03:3c:
                    b3:42:b2:11:3a:00:5c:ce:c5:9f:06:9b:96:8a:52:
                    c2:8b:5d:38:40:e1:d7:96:5f:63:ad:6c:81:e6:ec:
                    8a:f6:30:5b:d2:1e:11:76:86:c1:1d:ab:12:57:49:
                    e5:4f:17:7b:47:fe:de:55:9e:3e:11:cb:37:c2:61:
                    f7:ee:fe:47:74:70:6a:20:62:ee:0e:98:7d:aa:3a:
                    8a:b7:76:aa:dd:b2:5d:d0:cd:e0:66:c0:38:29:93:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.83.0/24
                IPv6:
                  2a11:440::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:b0:d0:0e:13:4d:b9:b3:a5:7f:b3:54:62:db:5c:06:a4:f2:
         d1:e5:36:e4:18:80:a6:8f:8f:4e:4e:39:20:14:fb:c6:75:0a:
         ee:fd:fb:6f:e8:fd:30:9b:18:c1:86:87:82:57:3c:cc:41:40:
         59:9a:e5:8b:93:59:de:f3:54:d8:ed:eb:dd:09:7d:3a:7b:6c:
         0a:0f:fa:a9:63:43:6d:1a:48:10:b8:a5:26:8b:35:0e:c7:fd:
         72:42:24:63:f9:92:d4:34:8c:30:50:f8:61:ba:5c:67:fa:7a:
         44:47:ee:06:a9:81:f5:76:1d:4b:a4:bd:72:dc:ea:14:2c:27:
         38:af:4e:01:8d:47:c3:0d:d9:24:1e:ca:34:44:d9:74:df:b7:
         09:2b:18:dd:0c:9b:fe:35:50:59:ed:b8:13:ac:5c:33:7c:b6:
         d7:7c:2a:14:52:f3:85:06:81:ca:31:98:53:eb:a3:ad:f3:51:
         6a:ae:fb:8e:19:f0:1e:87:54:a6:8c:3b:9f:4d:60:bc:98:e8:
         c5:86:56:52:64:7b:90:3d:75:f4:e5:01:af:4e:2f:e0:b2:9d:
         a9:94:85:bf:7c:a2:5e:f2:9a:41:6c:f0:eb:79:26:5c:73:96:
         db:f2:a4:7a:c5:15:6f:d6:e8:e2:78:b3:4b:ea:d8:fb:53:50:
         e7:1d:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----