Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
File:                     GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer (raw, json)
Hash identifier:          bSrBE8CtiVvUrgMEVaeGgD2zRAp+EkWdWIFUXxTvXbE=
Subject key identifier:   19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195425D41C4139C7778C1A8C74F5C25953D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 26 Feb 2025 13:06:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205984
                          IP: 62.192.160.0/22
                          IP: 2a06:1380::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:42:5d:41:c4:13:9c:77:78:c1:a8:c7:4f:5c:25:95:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 26 13:06:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:89:87:fc:68:a0:0e:23:0b:5c:30:d3:fa:
                    2e:9d:0d:ea:03:31:b8:ac:f4:73:76:13:f9:71:5f:
                    58:b7:0f:bd:0a:0b:56:22:0b:9c:b4:f9:09:db:e5:
                    da:8d:25:8c:d9:59:5e:c3:59:5e:1b:56:fd:6e:ca:
                    2e:f9:66:0a:6d:8f:06:83:2a:fd:f3:f7:cf:c0:c2:
                    00:7f:f6:27:8d:30:f5:0f:2c:5b:4b:89:51:29:6b:
                    3c:ec:b9:0e:fe:df:8b:72:f2:ca:ec:ed:b0:77:6b:
                    e5:08:4e:a5:3d:80:58:61:c1:0f:8c:7c:0e:f4:c7:
                    2e:e4:df:ac:4e:8c:f8:79:86:66:08:cf:ec:2b:d4:
                    28:c0:33:70:c9:08:73:db:cb:7a:44:dc:b9:65:8c:
                    34:4a:07:84:0f:25:64:dd:8f:4c:a0:d4:3f:d4:58:
                    43:68:5e:1a:47:ae:a1:ff:61:09:dd:5a:21:2b:e6:
                    17:4a:c6:7c:53:3a:08:5f:cd:e7:24:e5:9d:9c:ea:
                    a5:51:e4:79:85:3e:d0:e2:88:d3:91:fa:bd:36:62:
                    de:38:b9:75:1e:97:f7:72:b1:0d:ba:a4:2a:8d:98:
                    d6:ff:10:39:b2:68:a5:8a:8b:5b:a4:79:9c:54:ad:
                    d4:01:4b:14:f4:cf:89:01:64:0e:d1:4c:5c:4b:ab:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.160.0/22
                IPv6:
                  2a06:1380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205984

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:71:4c:b6:03:96:4e:07:5a:19:0c:6b:d1:ed:4a:28:9b:
         66:7e:0c:e7:03:25:80:bc:b0:cf:cd:01:1a:31:c5:50:4e:a2:
         14:21:d6:87:3b:e8:53:02:7a:81:ca:5f:2c:99:71:4f:52:ed:
         91:f9:d6:60:93:8e:62:39:04:03:2c:6e:c0:b8:43:58:5d:92:
         59:ec:49:10:23:88:94:22:4c:90:85:2c:f9:bc:58:bd:98:6d:
         34:a8:04:d1:30:a4:e2:83:81:2e:91:d0:4a:e8:d8:ca:9b:09:
         3d:10:48:e9:c0:6d:4f:ac:94:98:a9:dc:21:3f:d1:88:05:48:
         5f:50:af:6a:2a:0a:7d:15:b8:5f:e3:9d:6e:19:65:0b:18:36:
         9e:7a:05:8d:87:a9:50:af:4a:ea:05:21:63:ab:a8:56:70:eb:
         0f:19:f5:38:84:a9:6f:e6:89:0c:9b:56:d4:6f:f7:ef:73:21:
         fe:0e:20:5b:2d:f3:84:15:d7:34:18:b6:84:81:b3:5e:70:e3:
         34:96:e5:5b:ed:eb:9f:d3:06:66:e7:cc:93:c6:ef:fa:74:69:
         d8:23:5a:4f:7e:06:4f:0a:78:c4:77:72:07:44:cb:72:72:3b:
         e6:79:bd:35:9c:66:ac:e4:80:01:02:23:65:4e:2f:8a:10:d6:
         e7:51:75:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----