Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
File:                     DudNGMQEmi2bgSwqWFXP63Wvpmc.cer (raw, json)
Hash identifier:          IXwjRpFUr3aUiW9GfhJkLKwNa5A89GcNc9C6Mrhzdww=
Subject key identifier:   0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427473FB2E6FD4AEA005393DB2200F424
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60448
                          IP: 176.98.120.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:3f:b2:e6:fd:4a:ea:00:53:93:db:22:00:f4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:59:6c:f8:06:2d:9f:b7:da:ef:e0:c2:0b:
                    65:95:0a:30:60:9e:ad:7c:c1:f9:24:6f:bc:28:38:
                    e4:c5:0b:db:4b:c0:fe:93:69:18:41:75:16:73:85:
                    bf:46:bb:79:0e:ab:4c:ee:04:0c:f8:6f:5f:6d:d9:
                    12:95:e7:c3:21:6b:85:93:51:94:3f:4b:ff:69:e4:
                    42:40:5e:76:f0:ee:b4:96:cd:04:9b:ba:9b:56:30:
                    d0:a0:e0:8f:3c:58:d7:89:b8:07:3f:ce:05:00:c2:
                    aa:7a:ff:d3:69:4d:8d:a9:b6:4e:f1:ee:0f:18:f0:
                    2e:c0:3a:19:a6:4a:c6:de:7d:78:5e:51:b0:d5:44:
                    5a:0d:76:27:0a:b2:65:86:27:79:82:0e:47:75:ab:
                    f6:16:a5:7a:a0:95:58:25:78:f0:57:55:22:4e:ad:
                    df:75:dc:d7:0d:9f:50:3e:96:47:ae:ad:c0:0a:30:
                    29:01:1c:76:2b:8b:4a:6d:3f:9e:00:8a:af:44:62:
                    e5:07:08:8a:ad:4b:0b:56:b9:7b:c2:6c:f7:af:e5:
                    eb:d3:d8:96:80:6f:51:b8:01:aa:50:d0:0b:b5:5a:
                    e6:51:1f:69:49:92:ea:9e:86:e3:88:af:e0:78:46:
                    61:7e:ce:cb:57:72:e1:95:fd:7d:2d:a4:44:cd:4e:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.98.120.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60448

    Signature Algorithm: sha256WithRSAEncryption
         21:db:9d:1e:42:1b:cd:07:71:72:bb:ac:b1:3b:45:69:59:bb:
         a0:04:94:f0:3f:de:eb:68:65:16:fa:3e:df:89:5d:dd:14:d5:
         a9:b4:d2:64:ba:86:00:14:32:95:34:0d:10:a1:05:4c:a6:f2:
         54:23:bf:37:0b:20:2f:b3:6a:50:9b:69:a4:19:79:90:1f:10:
         2f:1c:98:90:f0:d2:9f:6d:17:da:b3:c3:e6:27:50:24:20:e0:
         e4:e5:df:22:4f:d8:20:54:99:96:09:3f:fe:6f:37:d0:fa:64:
         08:6c:a0:dd:f1:e9:0c:a8:af:3e:0d:dd:62:e0:13:c6:5b:28:
         ff:f2:f0:34:b4:93:2e:89:2a:79:7f:58:6d:a0:d4:36:9e:d5:
         ff:13:e2:f0:9c:07:8a:b9:b6:b5:c9:f5:9c:c9:1c:e6:f2:cd:
         ba:6a:4b:30:af:ed:71:f0:b4:14:c0:d0:4e:93:14:56:f5:6e:
         1e:d0:c6:f3:5a:19:59:0e:b1:88:e3:cf:37:8b:e1:e9:43:f8:
         61:8b:84:a1:73:a6:66:70:f8:8d:84:7c:bc:fc:96:6e:64:b9:
         59:e7:38:ce:36:34:0c:bd:e5:9f:06:09:03:8a:32:db:bb:a9:
         d5:cc:de:54:0b:e6:57:c4:c2:1d:0e:6c:c4:4d:8b:de:95:7f:
         48:30:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----