Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
File:                     FqwWDambNJSla1R8aKjiwJGGkbU.cer (raw, json)
Hash identifier:          POb8oiIbmY2A9IhLoZoJzV83U8Zkvo+Ln2QKbA3xQxA=
Subject key identifier:   16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942068773FD398E2D3B429C32BE9D53FD2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62223
                          IP: 185.42.192.0/22
                          IP: 2a04:9100::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:77:3f:d3:98:e2:d3:b4:29:c3:2b:e9:d5:3f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:6f:ea:f1:df:36:36:e9:d4:1d:3a:57:71:
                    3b:24:56:48:96:6d:1f:ed:1e:30:28:d7:1b:53:98:
                    8f:04:a0:91:31:c0:42:cd:f8:40:f8:36:a0:18:0e:
                    f4:96:43:53:12:86:24:18:37:b3:57:71:25:7e:05:
                    bf:4b:cf:ee:01:ad:e1:29:41:f5:ec:15:ba:d5:01:
                    43:78:69:d0:ec:37:c2:06:d7:f8:28:54:81:8c:9e:
                    bd:0b:02:21:e9:f9:01:6c:a0:62:1f:10:1d:81:a5:
                    64:b8:25:ae:3d:1b:1d:4f:12:62:e2:1f:b9:ab:b5:
                    9f:e1:db:f7:e8:81:7f:36:8a:40:da:ae:3e:0b:73:
                    5d:25:ce:32:75:5c:46:92:74:f3:12:7d:28:49:e2:
                    70:e8:63:97:bc:4b:d4:f5:fe:17:20:10:24:21:25:
                    1d:40:c4:b5:67:b5:b2:2e:37:13:67:60:00:65:4f:
                    2a:c1:05:47:35:2f:fe:cb:b5:5b:fe:95:83:ec:02:
                    4c:6c:53:2b:3b:21:97:05:b4:5b:63:dd:21:16:a7:
                    fd:21:e9:79:0b:04:c1:74:8a:50:ea:0e:93:c1:35:
                    da:4a:6c:f9:ed:a7:78:21:48:bb:ca:ca:7e:95:b5:
                    c9:47:e7:ca:ef:34:04:8c:0c:2c:52:50:7c:76:99:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.42.192.0/22
                IPv6:
                  2a04:9100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62223

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:54:73:2a:ae:fd:fa:5c:d5:e4:eb:5d:b1:7b:66:c3:6e:
         ad:7a:0b:48:1b:6a:61:9a:8e:a5:8c:28:47:f0:7e:45:6c:28:
         44:9d:92:3e:0f:33:30:f6:5f:b4:2b:3c:00:21:b6:c3:5b:67:
         76:fd:91:cc:b5:ec:e8:7f:91:93:45:33:26:01:df:d8:59:e6:
         e7:42:4b:de:b2:f3:d0:2d:e2:5b:b3:f7:54:26:ac:93:10:7b:
         e9:3e:69:0e:f9:7d:c7:af:98:1c:cc:f7:f7:8a:a6:f9:65:90:
         7d:84:c8:99:84:ea:c1:0f:04:0c:e2:6d:df:fd:06:e2:fb:41:
         9e:2a:07:df:9d:73:c2:5e:70:78:42:5d:f3:e5:42:b0:2e:1b:
         58:15:27:94:e8:f0:2d:2c:56:2b:df:20:97:e4:14:07:1c:d6:
         8c:ad:e2:9b:96:1e:3f:6c:fc:d2:11:64:25:34:9b:28:ef:40:
         bb:0f:17:72:ea:d4:3b:12:8f:e2:1e:99:bd:5a:68:3b:ec:06:
         0b:6a:fc:15:e7:db:ee:00:6a:47:1e:34:e7:a2:52:33:c7:f5:
         5e:0a:c1:f4:07:57:61:03:d0:34:aa:e8:84:b5:aa:62:c8:4f:
         23:58:4b:3f:0b:7b:71:36:61:db:d2:4f:5e:0f:82:b1:eb:f3:
         54:46:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----