Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
File:                     KqJOWBL8wxBrnrCusA5ie6I10FY.cer (raw, json)
Hash identifier:          9tZILEIJdcb/alIZhhzKhFXQr62A0vF8LZ+UbYpD03g=
Subject key identifier:   2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC2FE0854404E0B81DD83288F61247
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:49:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50538
                          IP: 37.110.240.0/21
                          IP: 109.235.216.0/21
                          IP: 2a03:dcc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:2f:e0:85:44:04:e0:b8:1d:d8:32:88:f6:12:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:46:8c:c2:bd:de:cd:9e:da:f0:57:fc:f5:
                    43:7a:7e:83:17:44:11:1f:97:26:32:1f:5e:5a:ac:
                    89:ae:52:dc:3c:09:ec:69:e7:f8:35:88:8c:e0:a3:
                    46:48:d9:8f:ee:db:6c:df:32:43:77:52:83:ec:6c:
                    4a:36:87:33:62:29:4b:dc:f0:20:67:30:00:d6:57:
                    2d:58:05:ee:94:cd:43:47:18:4b:c1:31:b9:69:99:
                    32:cf:8f:ef:4f:41:d2:8e:d2:5f:af:2f:d2:62:40:
                    61:7a:02:ad:55:06:9f:33:8c:12:04:03:b9:f2:67:
                    c3:c2:f8:4c:9a:ad:38:bd:12:09:f9:1a:69:27:94:
                    73:7a:75:71:7c:7a:2b:c9:71:b3:ba:0d:c1:16:0a:
                    51:3e:d6:66:22:b8:8f:e9:1d:08:3e:0c:6f:0d:2b:
                    c1:26:d6:ef:36:d5:41:cc:c8:7f:6b:1c:86:3e:d7:
                    79:33:b4:ac:ef:e2:cf:81:54:a8:ba:7a:4b:6f:a0:
                    91:f8:70:bf:b2:34:7a:8e:70:2a:68:c8:ae:f6:6e:
                    d5:5b:2d:0a:6c:ee:06:47:b7:0d:df:a0:b9:3b:9a:
                    bc:78:5b:d1:ae:13:c7:f3:a4:25:dd:39:f3:1f:6a:
                    87:f5:54:f6:0c:5c:6b:b5:de:19:45:38:b5:fe:c8:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.110.240.0/21
                  109.235.216.0/21
                IPv6:
                  2a03:dcc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50538

    Signature Algorithm: sha256WithRSAEncryption
         7c:8e:d3:ab:f9:a7:57:05:b5:15:e8:6a:f5:25:f9:b5:49:e7:
         b1:64:91:3c:ee:fa:ff:9e:e5:ba:0b:6e:b2:6c:bf:52:db:8d:
         d9:92:4d:a9:25:20:b6:51:20:98:f5:c8:ec:d1:67:e2:90:14:
         3c:e2:50:d6:43:c5:73:54:ec:6c:b9:9b:f7:9a:5f:03:db:40:
         2c:be:2f:4b:4b:39:76:ae:a0:c9:05:23:69:f6:64:11:6e:18:
         81:2b:d2:a5:66:3b:12:6b:93:ae:5e:f7:d6:a1:f3:0c:ca:12:
         72:70:b4:c1:a8:85:7b:49:ab:e2:d1:f8:3e:c9:4f:d0:99:7c:
         65:7c:f0:b1:99:53:8c:d7:f3:19:64:33:93:30:52:31:58:1d:
         ad:93:06:8b:e3:4f:5b:ac:6a:37:ae:48:bd:d5:33:04:ab:29:
         0d:d1:d1:22:3d:ff:76:e0:4d:d5:9f:9b:35:e8:cf:c5:bd:2c:
         4c:a3:2c:e1:76:c3:c9:18:d3:4a:5b:ad:be:09:68:f6:07:05:
         7d:05:dc:84:7f:cd:f6:dc:fc:2d:bb:99:b3:cd:48:96:01:5c:
         d0:d0:0b:59:41:7a:8d:f2:94:b0:82:14:3d:cd:75:dc:65:dc:
         e1:17:27:de:6c:5a:4b:4f:d6:20:2e:ef:55:27:d0:04:e5:bd:
         4d:45:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----