Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
File:                     QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer (raw, json)
Hash identifier:          INsjBlBUSgwfId83CZn/2ptNDMUqYmNW2kbNOcTYDAw=
Subject key identifier:   40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A14E4AAB5139EC541A7A5936B3592
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 13195
                          IP: 193.201.107.0/24
                          IP: 2001:678:c28::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:14:e4:aa:b5:13:9e:c5:41:a7:a5:93:6b:35:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:21:d3:10:3e:b6:28:62:68:1e:71:5a:46:
                    54:1b:1d:27:8a:05:7e:e0:9a:d3:88:2a:7a:97:88:
                    61:ec:ea:b0:f6:c6:e3:fa:4b:8d:f1:e6:cc:97:2a:
                    8e:a7:dc:5c:ae:71:f6:b4:bd:6a:77:eb:26:04:10:
                    d4:14:13:85:29:41:f5:a2:f0:53:ec:0d:a2:c8:6e:
                    5d:42:39:ec:1d:c0:b7:c0:f0:bd:d5:9f:96:6a:2e:
                    f7:c5:e7:02:5f:82:8f:cf:d4:88:13:3d:73:a5:ff:
                    ff:61:91:c7:8c:65:51:80:57:aa:7d:21:64:f6:c8:
                    99:d8:d3:4e:ab:03:37:cb:2b:b4:e9:0a:cc:ba:17:
                    17:b2:17:07:d9:76:81:00:64:6f:b2:85:3d:1e:34:
                    ae:10:d2:11:08:31:f7:bf:d9:67:fe:d3:6a:4c:bb:
                    11:59:93:77:f7:9d:b8:28:e1:ed:53:90:92:c7:59:
                    95:e5:59:4c:1d:cf:4d:f1:30:45:b9:9d:8b:ca:0f:
                    04:06:f7:2f:27:dd:ff:a3:13:f4:37:3b:14:87:02:
                    80:48:04:53:24:e6:85:81:36:58:38:fe:3e:2f:73:
                    92:2f:83:8b:2c:f3:12:c7:f5:f4:17:76:8b:d7:f1:
                    60:8c:ab:8a:73:84:ee:81:9c:25:68:b5:4e:c1:46:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.107.0/24
                IPv6:
                  2001:678:c28::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13195

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:8f:86:9d:4b:e3:04:c1:bd:a2:81:27:ca:f2:5d:48:e5:
         94:47:3e:58:15:f8:0d:dc:16:34:e9:4b:10:4f:28:a9:1d:1f:
         38:d3:67:02:8e:ff:7f:b4:d1:1e:6a:28:13:13:e6:fb:40:04:
         ce:0a:df:a9:51:48:2e:08:09:1e:0a:b5:65:0c:b3:a5:e2:37:
         04:ef:10:c2:3f:bd:d3:ee:02:bf:ca:fc:6e:eb:f4:8c:4c:b1:
         55:a5:a7:c3:26:d1:ab:b6:7c:18:53:4f:e0:3a:e0:4a:a5:0b:
         12:2a:2e:35:4c:f4:06:f6:e7:dd:be:fa:66:82:12:ce:18:c2:
         0a:44:73:10:4e:bf:4f:20:9c:1d:e1:2e:e9:a0:42:0a:3e:fd:
         ae:3a:36:29:37:0b:f0:ba:e9:68:29:57:ca:4d:e5:09:12:ed:
         df:19:1f:1e:1f:a3:77:28:a5:a9:12:94:d0:36:db:a2:ae:8c:
         dc:42:40:ba:31:78:5e:de:b7:44:4d:c9:ad:91:36:41:7b:57:
         95:c7:12:9f:6b:33:2e:3c:94:29:ea:c4:73:1f:49:99:bc:a2:
         6a:9c:15:d1:fe:a0:f0:c0:19:df:78:92:b4:4f:e5:01:ec:11:
         8d:e1:22:66:37:18:3d:89:83:64:1e:f2:59:7e:6c:4d:fd:3f:
         7f:de:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----