Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
File:                     QLt2qpbfjrfWd3s1clLhEVUjh4U.cer (raw, json)
Hash identifier:          HrX83tqQcLiBCdLk5bcgq84K3jFWzzsdOhyoN7xzqTs=
Subject key identifier:   40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942745B7B3AC2548F3CAE9B16DA28D7EF8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:47:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208560
                          IP: 83.150.192.0/22
                          IP: 2a10:fe00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:45:b7:b3:ac:25:48:f3:ca:e9:b1:6d:a2:8d:7e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=40bb76aa96df8eb7d6777b357252e11155238785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:32:8b:1a:b5:fe:e1:c4:ab:ce:81:64:24:
                    13:48:87:0a:3f:5f:13:0a:a0:fc:97:7f:8c:b9:d5:
                    ff:76:63:c5:64:df:7d:9c:be:e7:b0:04:a5:ce:53:
                    02:0b:d8:e9:7a:50:14:fc:67:ac:1d:50:16:38:17:
                    69:58:2e:6a:69:30:99:cd:ff:35:86:29:9f:57:5d:
                    5f:11:cf:41:78:d8:25:0b:55:b6:c8:52:29:05:30:
                    bd:f2:1d:68:9b:33:f8:b5:5a:be:17:97:46:ef:a4:
                    28:7b:e4:ea:37:9b:d6:12:d3:fe:ef:97:da:85:f5:
                    94:94:08:af:fb:7f:ef:9d:35:cd:33:82:fb:c6:c5:
                    4c:28:53:54:6d:84:93:61:46:e4:df:6d:11:c0:5f:
                    7e:0c:35:c7:c2:12:0d:9b:3e:8f:ee:fe:9b:ed:f2:
                    08:2b:c7:3b:d9:73:70:27:e9:38:95:92:40:c0:d3:
                    68:92:f1:ef:02:0f:10:c6:83:0e:b0:f0:e6:c6:18:
                    15:12:4b:72:d1:f4:32:c4:a2:65:e9:00:96:d1:13:
                    23:ae:e4:d5:b7:0a:37:65:33:e5:7e:bd:20:87:f9:
                    bc:eb:6b:ac:61:78:0a:19:e4:c7:cf:a5:26:a8:43:
                    78:ec:9c:be:e9:d4:8c:13:72:85:d1:5e:d6:b9:61:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.150.192.0/22
                IPv6:
                  2a10:fe00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208560

    Signature Algorithm: sha256WithRSAEncryption
         44:1d:6f:09:ae:78:1c:00:ed:20:b9:b1:6d:7e:a6:78:63:51:
         d5:9c:2d:7e:ae:3a:48:c0:76:a7:d1:e2:21:2e:39:01:8e:b3:
         74:ce:8a:60:76:4a:4d:6b:d1:9d:c4:d9:af:cc:b8:eb:76:11:
         86:9d:ba:ef:5f:e8:f8:fc:0d:ef:5b:cd:90:3d:e4:e2:73:fe:
         27:37:00:e9:a5:fd:88:4c:35:bd:04:7e:c8:52:1e:b1:64:24:
         68:e9:b4:d8:df:f8:d3:41:3f:18:2e:21:a7:ce:d9:6b:e1:50:
         96:0a:eb:06:5b:24:b4:42:86:90:fb:8e:b3:9e:89:7d:11:7f:
         d3:9c:91:a4:b2:32:04:70:d0:ed:04:39:cc:6c:0e:97:4d:ea:
         e7:01:1b:1c:f2:b1:8b:8c:68:6d:8b:81:77:82:b8:3d:2c:3e:
         76:6c:57:ec:03:df:7d:31:f3:3c:be:36:be:b8:81:a1:77:5e:
         d9:6f:d6:ef:7b:ea:a4:6d:04:50:15:47:2c:47:4d:a1:86:23:
         56:fd:17:8d:97:92:a4:29:f2:a6:ee:c1:db:ff:c9:58:c1:0f:
         ce:ae:24:08:95:18:e3:10:61:77:5c:58:a5:9a:0d:55:9c:02:
         eb:67:15:a8:c7:26:92:ed:3c:2e:83:37:1f:d5:fd:04:3a:22:
         e7:ba:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----