Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
File:                     NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer (raw, json)
Hash identifier:          FXy6Pm5W6zu0NNQMibXn/XLkJjYO7n52xUfiu0f80qk=
Subject key identifier:   35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E033EE3BB291EE9CFE22D80ADC41A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.183.40.0/22
                          IP: 2a0b:380::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:03:3e:e3:bb:29:1e:e9:cf:e2:2d:80:ad:c4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:00:4f:24:ec:40:ea:99:92:9a:ae:0e:35:
                    1c:85:60:8b:ed:dd:94:f3:ee:9a:12:25:82:a9:19:
                    6c:8b:89:73:ed:f9:0f:d6:b2:81:0e:4b:67:49:70:
                    22:fa:ba:99:0e:a8:d4:21:9a:f5:c6:f9:8a:53:6f:
                    b8:36:94:cf:d2:c2:5a:f1:5b:86:4e:cc:e8:43:39:
                    9d:f3:55:2e:17:25:90:db:c1:5f:c6:3e:71:fb:44:
                    2b:23:4a:e4:a0:13:18:54:3e:a9:1a:2f:b4:64:62:
                    d8:b4:b5:53:f9:6c:bf:1a:61:65:e0:fc:4b:70:0f:
                    67:d9:b9:69:37:ea:6a:b3:3a:38:79:f9:6d:64:76:
                    9e:ea:16:37:f7:cb:80:a5:58:61:96:44:59:07:42:
                    a9:21:54:de:95:6d:8e:7e:54:e2:21:24:86:e5:a5:
                    9e:de:fd:42:ce:8f:c3:57:4e:04:81:b3:7c:a7:a7:
                    86:34:ce:2a:ba:e8:7d:bd:37:a7:6b:d8:b3:28:40:
                    3c:ea:92:f7:d0:95:81:65:1d:fd:2b:31:a2:25:e4:
                    e6:e8:0e:d3:9d:cd:a4:8c:56:3e:11:93:da:0e:54:
                    2f:51:c9:70:45:53:fa:15:0d:fc:aa:8d:7b:0b:29:
                    fd:1a:da:43:70:03:b3:84:14:2c:19:d7:75:e5:3d:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.40.0/22
                IPv6:
                  2a0b:380::/29

    Signature Algorithm: sha256WithRSAEncryption
         82:1f:94:e2:62:95:f0:34:74:8a:92:9f:59:56:9e:e8:ed:76:
         27:24:78:16:63:15:57:17:3f:45:6a:4f:42:ad:16:fa:9d:b0:
         8d:58:e2:a0:d7:bf:a1:53:6b:c0:11:3c:a6:b3:1d:de:04:e8:
         13:70:8f:03:e4:bb:fc:36:b1:98:bd:75:ac:b5:1c:6d:a9:44:
         dd:bf:02:9b:a0:65:78:db:bf:f8:cc:12:04:6e:e9:e9:5e:e4:
         1d:1e:dd:65:6c:ac:e2:7d:c6:ce:62:8a:87:b5:65:19:d9:56:
         c4:be:7a:5c:07:cd:23:73:db:9d:5b:61:7c:cf:e4:67:33:0f:
         e2:de:b4:e8:91:d5:de:5f:4c:c7:aa:dd:a7:9d:c6:af:59:09:
         60:ec:89:b7:96:47:ea:be:2d:c4:ae:8d:81:29:6d:e6:bc:91:
         3d:67:d7:9e:9b:71:32:a1:3f:38:a5:c3:21:cd:97:f0:2e:be:
         f1:95:c5:a7:f8:9c:c2:8e:3c:7d:78:0a:26:b1:e5:8d:70:fb:
         f2:2b:2a:82:e7:25:ef:75:9b:2d:ae:50:2f:43:d4:bb:a0:91:
         9b:9c:f5:65:1f:7a:fc:4f:ed:da:a0:4e:18:81:a3:65:46:8b:
         a7:a4:45:93:c8:9d:ae:06:1a:89:a5:10:a4:0b:bf:1d:99:a1:
         18:0a:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----