Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
File:                     NiQhSOPmNqkDQ_PpUES439udHNk.cer (raw, json)
Hash identifier:          2Z9+mGU8XiIo7eMmmAA8Wq8JZrJi2x40laCiuZoJdOI=
Subject key identifier:   36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195AF81D70938CA6ACC6645DA85D008CC01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 19 Mar 2025 17:44:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.164.184.0/24
                          IP: 2a0b:5400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:af:81:d7:09:38:ca:6a:cc:66:45:da:85:d0:08:cc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 19 17:44:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:41:77:13:0f:6e:2c:9f:33:32:33:d9:01:
                    9c:44:80:2c:33:82:fc:fc:6c:f9:43:80:e4:f2:37:
                    42:d9:ec:82:18:ef:0d:3c:f0:9a:ba:0c:d4:cc:4b:
                    4a:81:80:97:11:46:1f:d3:34:45:04:49:f9:bd:a9:
                    bd:87:4f:26:15:7d:96:60:ac:2c:0d:89:66:ee:3f:
                    a3:8d:59:77:9c:9e:bd:e3:04:70:c7:ba:6e:f8:0c:
                    ef:11:ac:82:c0:3c:c4:c2:6e:f4:f3:b4:a0:f8:83:
                    10:f7:bb:6e:fd:50:af:f2:37:ad:8a:e8:3a:7f:25:
                    23:22:c4:8d:82:6d:e7:d8:ff:e1:c1:1d:36:68:34:
                    99:32:7a:50:93:7b:8b:43:d4:02:ff:97:d4:51:7e:
                    fc:97:a1:c2:34:41:ee:91:09:fb:43:fc:37:db:9b:
                    16:92:df:dd:a7:cd:a9:f1:16:77:b2:de:2a:15:ce:
                    a6:a5:f3:a5:f0:3e:d9:2e:19:88:8e:09:9a:f4:9e:
                    ea:4a:12:15:81:c7:63:3d:94:3f:bf:8b:d2:09:85:
                    b8:8f:02:8d:34:ed:67:74:8f:2c:6e:0a:96:86:20:
                    ee:db:16:63:1c:07:37:18:f1:a2:0b:a5:6a:93:d1:
                    03:b8:ad:11:e8:53:cc:b2:aa:dd:5b:d1:48:27:77:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.184.0/24
                IPv6:
                  2a0b:5400::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:65:aa:be:45:8d:1d:1d:dc:c9:50:df:d5:d7:91:12:e2:
         a4:cf:b1:18:f6:df:0e:50:29:2b:46:d4:60:f3:51:5e:71:02:
         5a:8d:7d:f6:fc:6d:6f:5a:c3:28:74:c6:86:0c:06:8c:48:68:
         b0:cd:56:41:81:d8:a0:40:f7:e7:09:05:f6:cd:3e:60:d9:73:
         2a:a6:a0:8c:d7:14:6f:90:21:d0:ac:bd:7a:6b:16:4e:4e:b4:
         b1:68:41:03:f4:b4:17:01:c3:ff:37:c1:8f:92:da:34:00:fa:
         45:69:40:3b:a2:58:34:d1:ee:9c:cf:d3:97:43:09:fa:9e:9e:
         36:7f:74:66:e5:1f:4c:6e:d2:94:13:f4:f7:d3:f8:7f:04:74:
         a5:bd:84:23:0c:b7:af:f6:71:0d:b7:bb:8d:ca:d8:a6:02:8d:
         dd:78:25:39:d0:b5:b7:6b:12:f9:b5:64:c3:2d:7b:58:5f:38:
         f1:08:05:93:0a:fe:4a:ea:67:b1:65:61:e1:ae:3e:a1:52:18:
         6f:c4:bc:09:cc:c8:5d:86:83:b6:d1:d1:fc:ad:e1:72:9f:09:
         4c:6f:02:1f:68:a9:40:cc:2f:65:56:4b:59:a6:20:d5:cb:d4:
         61:83:76:a2:83:ae:a3:d3:65:40:f6:fc:6c:c1:73:fd:7b:77:
         30:b4:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----