Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
File:                     FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer (raw, json)
Hash identifier:          JM2K4cPXAa4XDHB2qT5oyBjESzviZRBShmEvrhiiji8=
Subject key identifier:   16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206873AC3EBDEE47E02ABC4A2D344546
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.248.180.0/22
                          IP: 193.186.5.0 -- 193.186.6.255
                          IP: 2a0d:ee80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:73:ac:3e:bd:ee:47:e0:2a:bc:4a:2d:34:45:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:0e:b0:0c:2f:31:67:ca:9c:3a:25:c8:8a:
                    58:30:4f:8f:06:03:9a:a2:b9:d1:5d:7e:75:55:b0:
                    66:de:2b:32:71:7c:88:c2:eb:0c:2b:5f:18:30:bd:
                    96:35:5e:e6:3b:a0:3d:d2:74:25:df:88:50:f5:39:
                    98:ac:c9:d6:a7:62:9f:03:7f:db:ae:63:22:e7:05:
                    e5:46:31:de:63:f5:49:46:89:94:36:29:4d:31:10:
                    7e:36:85:c2:08:81:54:0e:01:18:46:10:c9:8c:83:
                    6b:06:6a:74:c4:07:4c:e7:38:c1:97:68:a8:74:83:
                    e8:ab:2e:b1:e6:46:10:a8:b7:b2:f4:70:af:c5:9e:
                    af:75:19:04:3e:ff:59:93:78:df:65:7a:1d:d9:8c:
                    af:c4:b3:8b:87:e3:01:85:50:a4:c4:fe:ce:05:26:
                    f6:c6:66:ee:3d:13:a8:a8:77:1f:24:5f:32:4a:1c:
                    e2:db:94:26:d3:57:25:10:7e:c1:eb:31:a1:85:50:
                    50:3a:ff:1c:b3:1f:d3:9d:a5:77:14:d1:d5:fa:c8:
                    df:8c:1a:7d:80:2e:83:f8:99:68:35:ff:d7:fa:a0:
                    c1:f2:07:29:55:fa:1a:4b:3f:dc:69:f5:c2:4e:35:
                    fd:c4:9a:2f:be:e2:f5:be:a3:66:60:80:0f:5e:2e:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.180.0/22
                  193.186.5.0-193.186.6.255
                IPv6:
                  2a0d:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:e9:9c:ef:5e:c4:39:68:2b:f9:d5:82:e3:bd:88:21:43:d1:
         87:4d:d1:d1:eb:48:c7:13:20:95:19:c1:8a:c2:4d:17:8f:9d:
         73:59:33:a3:0e:34:a1:29:04:36:67:39:c2:12:d6:ad:86:e9:
         8b:bc:ae:de:b0:ae:3f:de:5d:78:9b:3a:4e:85:21:51:cb:b2:
         84:6a:2a:81:a9:ab:c5:fd:8a:dd:51:34:a4:16:fe:e8:77:b4:
         a9:17:a7:24:26:66:1b:60:35:c3:7a:73:d2:c7:39:60:a6:ae:
         96:f6:29:a9:34:54:ee:37:71:f3:3c:a6:fd:17:d5:68:1d:a1:
         f3:19:46:e8:f5:77:6e:29:8e:c9:d2:b0:bf:3d:30:66:6f:f7:
         1e:6f:fd:d9:5f:1b:93:c2:cd:9f:62:db:da:46:c6:37:ce:61:
         dd:58:af:61:77:73:f1:2f:04:44:83:36:53:c7:02:bb:3e:6a:
         71:8b:3f:f8:94:2e:46:7c:5d:4b:8a:de:3d:2d:8f:c2:1b:1b:
         1a:cd:78:5e:d0:ad:64:15:67:65:42:f3:c7:c2:96:d3:e6:62:
         20:2b:37:77:4d:37:99:a9:7f:8a:f9:36:4a:da:87:dc:0a:6f:
         ee:e5:6b:03:4d:06:77:b6:ac:d5:de:74:00:aa:17:58:bd:e3:
         40:68:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----