Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
File:                     Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer (raw, json)
Hash identifier:          BwtGtvEUkqx9Dsm11hfoGSFIcKkXkNleodp2PupGAnc=
Subject key identifier:   43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521DC5275676C16CFCF2E90217A261D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.134.100.0/22
                          IP: 2a06:ecc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:dc:52:75:67:6c:16:cf:cf:2e:90:21:7a:26:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:f2:ed:2d:bd:1a:cb:70:6e:16:f0:e8:51:
                    71:e8:9d:3d:3f:65:41:5a:ce:0b:a4:30:5c:0f:ed:
                    73:32:93:eb:da:1c:64:6d:d2:74:14:4e:70:f0:e4:
                    09:1e:8d:b9:f8:cd:05:c2:32:43:a3:04:9d:7a:4f:
                    7e:52:e8:eb:eb:b8:6d:78:f3:cf:45:9c:f1:1d:d7:
                    57:07:38:e8:84:96:6e:63:a3:7b:9c:1c:05:40:51:
                    3a:58:2d:c7:34:be:d9:40:88:ac:c2:b7:92:c7:da:
                    96:3c:2d:e9:53:37:cf:93:fd:c8:b7:80:11:fa:fb:
                    5b:d6:e7:9f:c9:2a:d4:17:51:2b:a8:26:a7:d4:e0:
                    50:91:4a:5f:1a:f7:ae:f3:98:fa:b2:9a:8f:7e:2b:
                    18:fa:36:c5:28:a4:e3:5a:89:13:14:8b:d3:e4:a1:
                    67:81:86:8f:e3:70:6e:26:1a:6c:cf:ee:37:50:f6:
                    dd:c4:0b:df:89:0d:80:52:24:96:c3:dd:9f:74:96:
                    74:4a:24:eb:cc:39:6e:91:ab:8c:1a:76:22:6d:c1:
                    85:fd:08:5b:35:01:49:d6:de:c8:38:f4:b6:4d:9e:
                    fa:c2:04:d9:1e:86:47:3d:55:65:5b:ba:48:00:39:
                    38:2e:31:84:82:50:de:3d:03:c6:e7:78:d1:4e:67:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.100.0/22
                IPv6:
                  2a06:ecc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:05:e6:f2:b9:d8:b8:43:fc:c1:d7:31:e8:c8:ed:c8:5b:
         5a:3b:4f:54:b9:c5:76:f5:84:be:32:16:c6:40:e0:ad:91:92:
         7c:c8:f8:7c:83:72:3b:88:36:db:79:17:dd:06:65:12:63:1f:
         70:89:12:31:7a:32:81:be:79:13:a2:69:c0:a8:b9:8a:e8:67:
         21:41:d3:b0:33:4a:2d:78:96:2a:98:00:19:1d:1b:12:fc:a5:
         f4:16:81:53:5e:f1:7a:01:6d:6f:a6:a3:36:d4:3a:a3:56:71:
         e8:8c:9e:e9:f8:3e:0e:c1:45:c8:1a:0b:2a:2f:af:d0:f9:5d:
         b3:86:53:60:f6:1d:21:53:f7:53:0e:c7:a9:8e:95:68:66:ef:
         4c:0f:c4:05:53:ec:37:b0:34:8e:53:54:73:2a:42:74:5e:c5:
         08:4c:30:20:44:d4:a4:1e:3d:21:6b:5f:fe:ff:5f:08:a5:de:
         20:1f:94:9b:ff:38:09:8a:58:33:1f:74:c1:17:1b:00:a6:f7:
         70:cb:c9:e6:df:8d:5b:9c:77:f7:b0:ca:51:ff:c9:3f:f7:67:
         2b:a7:a0:90:3d:3a:e6:83:0a:c5:ba:f7:f9:ea:11:c9:5a:22:
         4d:f3:8e:65:ec:e9:59:9a:c8:e9:da:cf:6d:e2:07:cc:a4:f1:
         58:08:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----