Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
File:                     FLcYAN3cSX9g-e23gzyUlzq33Bw.cer (raw, json)
Hash identifier:          FeGYZhyEJyyUL3rLip/qDD3Qd9ihDKGDKzVl2YFBolo=
Subject key identifier:   14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1AF22F9AF8E5D6FE41271CB3F9DE6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 31.132.8.0/22
                          IP: 2a06:6400::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:af:22:f9:af:8e:5d:6f:e4:12:71:cb:3f:9d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:aa:25:ea:fb:02:d0:0e:3a:98:86:3d:b9:9b:
                    2e:0d:33:12:b3:1a:d1:fc:ef:53:52:16:7e:1b:8b:
                    d3:05:70:f2:7c:00:ea:f4:df:be:8f:09:cc:36:35:
                    01:b3:75:c6:d3:ca:0c:dc:d1:61:1c:ae:e3:6f:1d:
                    db:9f:2f:71:51:2a:be:78:d8:9c:08:16:4c:45:b1:
                    00:38:c6:e3:f9:6c:8c:4b:c0:c1:af:75:26:85:41:
                    d6:ff:fa:80:41:ca:1d:35:98:60:65:28:19:c1:4d:
                    7f:a8:ed:1d:24:c4:5c:78:db:48:30:28:8d:a6:7b:
                    cf:1c:f1:28:bb:93:50:6d:c8:96:d4:c2:f3:d7:6f:
                    d0:43:8c:29:24:4c:1f:ea:10:76:3c:1d:5b:6e:7e:
                    84:f3:8b:e0:3c:8e:6d:42:cf:dc:46:e4:ae:3e:ef:
                    dc:79:87:a2:6a:2a:49:d8:ed:66:20:23:e6:1d:b1:
                    3c:87:a5:de:7c:58:c3:cb:41:e4:82:f9:32:5c:e3:
                    8a:58:ec:a1:00:95:3f:52:f4:8c:23:3b:96:d8:05:
                    e1:cb:6e:f8:f7:78:e9:47:1b:d1:b1:02:13:05:93:
                    5a:21:3c:e7:19:67:c8:95:fa:5f:02:b5:2c:23:51:
                    a6:74:72:42:48:73:5f:dc:fa:9a:2d:d6:26:a0:bc:
                    f6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.132.8.0/22
                IPv6:
                  2a06:6400::/29

    Signature Algorithm: sha256WithRSAEncryption
         97:74:f1:35:0c:55:20:ad:7d:60:e7:8b:b2:bc:63:ce:04:b3:
         8b:ab:d3:54:56:4c:e5:01:4e:8c:81:79:1e:09:ce:5e:61:00:
         78:37:a8:fe:49:98:ed:eb:33:bd:4a:7b:7b:a6:0e:03:66:ef:
         a8:d4:34:81:1c:19:00:c1:f8:24:33:cb:08:4a:f9:ff:a7:9f:
         1b:ad:b8:66:1c:85:b6:b1:54:f3:39:d1:24:8e:2f:63:b1:e2:
         98:62:34:e2:6b:d8:ef:44:c7:1e:4c:b2:53:ff:6f:93:50:82:
         bf:0d:e4:22:5a:e2:be:78:6b:0c:92:d9:a2:7f:f1:ba:52:95:
         6c:c9:43:b1:71:53:7f:9a:e9:59:08:fb:17:34:80:df:95:d0:
         f4:a5:a3:77:e3:63:8b:20:c8:c2:0b:e8:dc:96:17:93:59:a7:
         79:3e:8f:05:73:e1:d9:91:29:83:70:78:20:31:8f:c5:3c:2c:
         77:65:55:9a:8a:47:db:77:44:d2:40:42:e2:67:12:dc:55:26:
         33:73:87:79:2a:3d:a7:02:ba:2c:98:a0:b4:44:62:15:65:7e:
         c2:71:8d:2e:49:bc:99:c0:3d:72:3f:08:ac:5c:1a:5f:1a:c5:
         e9:39:f5:6a:aa:4c:63:9d:55:e3:6f:13:7b:69:e4:12:57:13:
         be:26:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----