Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
File:                     QRxDIgghkceeLYbbThv50HGOJ-k.cer (raw, json)
Hash identifier:          iM9LusdfZybvQp/faa0bCaBJxkRBkblyY09kZAsNrJo=
Subject key identifier:   41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C29259F9E897BB2830629E4FF5079
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202695
                          IP: 64.38.104.0/22
                          IP: 92.243.72.0/23
                          IP: 185.156.244.0/22
                          IP: 2a03:5b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:29:25:9f:9e:89:7b:b2:83:06:29:e4:ff:50:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:21:7c:1b:17:43:f6:bf:6b:f8:e7:6c:20:85:
                    4a:01:3d:d1:9d:bf:83:d6:43:9c:06:af:10:ea:a6:
                    23:89:c7:94:f2:d8:3e:70:d8:ec:2b:fd:63:e7:cb:
                    ec:cd:02:8c:d6:59:6e:e1:87:a1:51:bd:4e:d8:0f:
                    4e:57:dc:43:c1:d1:92:06:9a:9d:1f:47:51:4c:6c:
                    2c:35:1f:93:f4:85:0c:aa:16:54:fb:e9:5c:ca:3e:
                    f8:82:86:21:0d:07:d8:48:8d:0f:e5:ee:8b:56:09:
                    ad:1c:27:d9:8e:c5:2a:86:fb:92:4d:d5:68:81:00:
                    a9:ac:e2:48:07:50:74:ac:67:c6:74:5e:dc:53:81:
                    e3:9f:ad:ef:f8:f4:f5:c0:6b:4b:8e:0e:80:b8:fb:
                    d6:b1:e0:9d:14:61:fd:79:56:99:75:08:e5:93:11:
                    24:3b:45:92:34:f8:5d:ae:c0:87:22:3a:5f:7f:8b:
                    5c:82:8f:d7:c8:10:41:1f:eb:bd:b7:d5:d7:f5:4e:
                    3f:2b:a2:58:90:74:7c:9f:68:32:73:62:2c:78:ce:
                    d3:b9:c2:76:cd:15:0d:40:1e:e3:70:28:90:38:66:
                    25:a3:1b:f7:23:77:f4:ff:a0:b0:74:41:4e:05:ec:
                    b9:7e:86:5e:c4:89:af:9e:e9:fa:e0:11:fe:75:e5:
                    69:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.104.0/22
                  92.243.72.0/23
                  185.156.244.0/22
                IPv6:
                  2a03:5b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202695

    Signature Algorithm: sha256WithRSAEncryption
         4e:c5:78:68:62:d2:3f:ad:2c:96:f6:d9:50:7f:79:f2:ae:94:
         fd:1b:7f:b2:8d:ef:f0:4e:7f:d6:65:db:3b:23:4f:33:65:3e:
         91:84:c8:d2:92:0a:32:a4:10:5d:14:aa:26:7f:7f:8d:51:ff:
         a3:e9:09:01:e5:e2:3b:b4:dd:9f:26:75:0c:07:b0:12:82:48:
         72:f6:4f:68:48:9a:0d:e4:61:51:35:d7:8d:a4:90:d5:bc:f7:
         7a:a9:ea:6d:17:ce:9e:24:79:b4:c4:65:97:94:29:20:a8:09:
         ce:0c:59:22:12:7b:77:fb:39:b9:e0:9d:7e:7f:5a:17:09:ac:
         9d:7a:78:64:55:8c:88:66:c1:ea:32:4e:4b:a1:e9:af:06:a9:
         74:5d:a8:4b:50:8a:35:29:30:81:85:6f:99:5b:d3:4f:83:65:
         71:9f:4a:89:0c:a8:6f:45:20:ec:9f:d3:65:9f:8a:27:ef:d2:
         a6:40:38:f9:f9:22:f9:eb:48:cc:1e:66:f5:dc:44:82:a8:fb:
         49:1c:f1:f7:63:79:99:b8:4d:34:60:b6:76:77:aa:18:d1:ad:
         9b:15:63:59:ff:ae:5a:79:24:57:b9:a4:9a:12:a9:fc:f0:08:
         07:b3:fe:94:bd:0b:12:e8:9f:8d:dc:4a:f9:45:f0:51:d6:5c:
         a9:6e:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----