Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer (raw, json)
Hash identifier:          2TO0umiHWNE5Vm0QP77LRSPL2q/nDi82OC6NfKJe17s=
Subject key identifier:   04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA669946FB2EFC9CBB362859DD95BA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198792
                          IP: 5.39.224.0/21
                          IP: 2a00:fb40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:66:99:46:fb:2e:fc:9c:bb:36:28:59:dd:95:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:04:f0:cd:ae:c3:e7:be:a2:64:c4:ed:ab:18:
                    0d:1e:65:c9:01:3c:f2:07:ad:bf:64:4e:02:bc:07:
                    00:30:1a:49:5f:55:a8:d3:00:98:1d:66:ea:10:75:
                    41:32:64:ec:df:40:ce:e9:09:76:a9:7e:a0:b5:d1:
                    0e:87:b5:db:c0:2a:73:29:98:f2:d5:35:54:c3:67:
                    c4:77:ce:c8:d5:a4:d8:b5:38:76:56:37:29:8f:ee:
                    55:53:0d:61:2e:c6:65:16:54:c9:70:a6:44:b0:68:
                    2f:9c:da:29:04:20:bd:f5:ff:7d:6c:be:45:6a:f6:
                    81:9e:92:ba:f8:73:6f:cb:1f:c4:1c:d0:d8:e2:12:
                    f6:a2:a3:72:4a:06:a2:c7:32:46:14:66:39:42:d7:
                    24:e9:11:ca:6a:94:19:72:80:3d:f5:79:2f:be:98:
                    a8:e7:7b:d0:4f:57:98:2a:7b:22:6b:1a:4e:66:30:
                    05:e4:a5:26:a6:cb:0a:4e:ee:89:1a:5e:a3:ee:29:
                    3d:f4:e0:be:5d:cf:71:3f:1d:0f:20:33:0a:81:47:
                    ed:fe:60:d8:5d:48:7e:0c:f8:e9:ce:92:2a:c6:0c:
                    f8:4b:f2:5a:83:81:39:26:69:2c:bd:4b:90:f1:cf:
                    db:d1:22:7c:fc:57:6a:c6:89:e3:08:57:43:13:d2:
                    59:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.39.224.0/21
                IPv6:
                  2a00:fb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198792

    Signature Algorithm: sha256WithRSAEncryption
         19:b9:71:4a:b5:58:61:11:01:c9:07:b7:9e:2b:dd:be:0b:9a:
         19:47:66:ef:e2:a6:49:17:d7:8e:d3:95:4b:ff:dc:80:81:ff:
         89:34:39:b9:74:48:1d:37:22:36:0e:5c:f2:d7:c3:5f:17:19:
         b1:f5:b9:d6:02:c6:e8:b8:69:db:83:02:b9:76:55:29:8b:31:
         eb:cc:40:29:5b:07:eb:1b:af:a5:0c:53:2b:51:f4:cb:b6:58:
         63:b3:9b:c2:df:2d:9b:fd:ab:bb:b5:4d:b8:8b:31:2c:f3:8c:
         5f:3a:1a:aa:7d:95:c9:9a:e0:c5:ea:55:95:9f:f2:7e:51:7e:
         cb:dc:89:fe:ea:57:a9:9a:e9:43:4f:6c:03:51:a6:dd:2f:32:
         87:7d:28:6a:48:9c:51:56:ae:b8:9b:b8:cc:b8:aa:b6:33:8d:
         c1:24:44:91:88:bf:40:d7:2a:90:ab:b9:e3:45:25:14:db:e2:
         63:14:a7:3d:7f:72:db:33:ee:57:f1:23:80:3d:50:56:db:f3:
         3d:c4:8d:13:51:00:21:76:d5:5a:8a:65:fb:f6:40:4a:1a:37:
         0e:57:e2:8c:cd:49:42:57:b1:b3:3e:a6:47:a7:97:03:eb:00:
         d1:e4:e0:d7:3f:85:a8:27:3e:a2:7c:be:98:84:4f:64:0e:69:
         ea:2d:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----