Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
File:                     Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer (raw, json)
Hash identifier:          gT+82b7tpe/xY+CZs7XJTqZgA+MHNttzkcGUzwfSsD8=
Subject key identifier:   43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942827F69EADA1B2B96673BBD93D6DD11D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:54:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.216.90.0/24
                          IP: 2001:678:2c4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:27:f6:9e:ad:a1:b2:b9:66:73:bb:d9:3d:6d:d1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:54:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:11:d3:61:57:60:e0:87:a9:36:ea:6a:76:7b:
                    70:59:99:4e:f0:38:92:aa:7b:eb:cf:60:26:45:40:
                    12:b1:47:20:e7:7b:b9:ee:d0:9f:67:c7:19:b8:1c:
                    4c:00:db:00:06:ce:f5:c2:f8:c7:ef:be:8a:c5:b5:
                    f7:ac:49:55:a7:cc:9f:7a:11:8c:76:c6:0e:9d:53:
                    7e:82:32:c1:c5:a5:0b:35:0d:67:79:cd:15:7c:58:
                    d8:de:c6:76:28:68:02:e4:d7:1c:09:6b:65:30:0f:
                    1f:46:b5:4b:6f:13:a9:bc:f1:0a:54:a3:4b:a4:85:
                    07:0e:b4:a4:69:6e:b0:a8:32:2d:2a:e0:39:07:7b:
                    b9:09:cb:b2:9f:cb:d7:fe:44:60:4f:72:45:a5:ba:
                    d7:bd:4e:73:45:85:bd:3b:4c:af:b1:a9:a9:e2:16:
                    ea:b3:ec:8c:c7:70:8e:4b:5e:c5:48:d6:ca:f3:a9:
                    7a:5b:70:1a:b4:be:7d:58:1c:54:88:27:ce:d2:aa:
                    79:b1:0c:3a:b1:4b:3a:9f:39:e5:b9:b0:4c:c3:39:
                    21:46:30:1b:08:60:40:85:f5:a2:22:22:69:71:64:
                    af:a0:85:3b:60:c8:b8:6c:6a:e4:f9:62:79:b9:31:
                    29:f8:92:97:e3:e5:38:fc:79:7d:70:28:15:78:8b:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.90.0/24
                IPv6:
                  2001:678:2c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:e6:b6:15:60:24:9e:09:3e:8b:7d:be:96:07:d1:61:bb:83:
         65:88:fd:86:d6:aa:5b:65:51:09:ba:95:ec:fa:4e:8e:9b:7b:
         df:e5:35:5a:51:d9:63:d3:36:c7:52:ef:90:1e:7d:32:e8:cc:
         50:da:99:c2:6c:e2:0f:29:49:5f:fe:a2:d5:eb:d6:7d:98:fb:
         1f:4d:34:72:a0:89:02:96:a7:ac:cf:3d:ec:82:e2:54:12:d5:
         e1:08:f8:3a:c4:2b:52:65:5d:45:89:7c:40:d3:aa:76:59:69:
         cc:20:be:68:6c:7e:5c:da:13:8e:ac:3d:e6:cd:09:2c:10:7f:
         93:06:68:41:03:ff:9a:f5:5f:8b:a4:62:d6:99:42:10:c9:86:
         7c:28:2f:67:63:27:4c:81:45:0b:45:0a:74:e1:b7:d0:54:f2:
         8c:91:2d:89:fd:47:32:a7:ee:c0:e3:65:15:15:4a:0b:13:0d:
         b3:ff:38:c9:6c:35:c4:c5:20:39:a9:68:03:19:05:1c:c6:54:
         29:25:20:a1:9e:f6:6e:b8:6a:cd:2f:3e:1b:be:9e:c0:45:10:
         a3:14:f4:4d:35:6f:0b:8b:44:a6:ba:64:93:1c:95:36:d7:d3:
         ac:cb:c3:31:71:b3:50:7c:cc:db:0a:ad:6c:05:bd:53:a9:a9:
         59:d1:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----