Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
File:                     QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer (raw, json)
Hash identifier:          PW0K6IW6RJZteI1fIPcmdOEGD+nmNOB9w0l8WI4gNOw=
Subject key identifier:   41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3E8478E35F121590FCE92ECC65B28
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198098
                          IP: 91.231.118.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:e8:47:8e:35:f1:21:59:0f:ce:92:ec:c6:5b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4155087a81848bf7b37ff8be59751d79440d8116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:15:5f:d7:c5:0c:ea:d5:47:12:46:7c:e8:
                    75:a5:31:da:13:e7:89:78:30:37:b5:af:eb:c2:d6:
                    e9:5c:58:f8:2e:e1:34:e4:c0:01:93:c4:d6:4b:ea:
                    81:1c:1d:de:5d:71:63:4b:b1:d9:0a:de:ec:fc:ad:
                    86:18:b0:86:98:dc:09:cc:a9:07:51:44:5b:a6:6d:
                    a7:b6:ab:5b:02:c2:b0:47:ca:16:94:25:9c:08:59:
                    5b:96:77:e6:15:23:7d:d5:76:63:dd:44:46:c6:a3:
                    d4:f7:13:25:f3:ba:cf:c5:46:9a:d3:d7:84:36:b3:
                    be:f0:30:a3:97:11:f4:70:31:57:94:3c:fb:61:f7:
                    3e:94:26:eb:ca:93:34:dc:55:d3:34:f0:9c:f3:94:
                    42:0f:01:8c:0d:cb:78:42:de:47:1b:d8:19:f5:65:
                    0b:94:f9:c2:e8:b3:bf:e3:47:be:43:ab:a8:be:a4:
                    1b:2f:03:f5:2a:59:ed:c1:7c:93:48:cd:7b:61:38:
                    4a:57:f8:e6:f6:d8:9c:09:f9:76:dd:f6:91:ba:55:
                    30:95:28:0a:2c:3f:87:c8:52:00:83:72:94:68:ca:
                    91:78:1d:0a:e1:03:a7:d8:55:17:f3:dd:f3:07:68:
                    ae:37:a6:ff:96:2d:f0:6e:c3:55:96:8f:b6:3e:c0:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.118.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198098

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:6a:8a:7f:42:62:83:46:be:ee:70:29:03:ef:fa:c9:23:
         65:27:0c:ca:00:ca:82:b0:79:1d:0a:ec:87:90:53:f3:61:a7:
         84:f1:ce:42:5f:f4:8b:71:5d:e1:68:44:b7:a7:ec:48:c0:51:
         f1:1c:32:da:76:54:ac:49:f8:25:40:ab:3e:b0:dc:06:51:af:
         ef:cc:2e:3a:c7:62:e4:03:07:ea:87:92:b8:24:ff:c6:59:51:
         1c:1f:58:3c:83:19:88:75:4f:1a:5c:a4:d9:3c:6e:60:10:37:
         53:31:30:20:ea:7e:13:3c:49:0c:7c:b7:14:34:22:1e:e0:73:
         d2:ba:8c:1b:ae:33:4f:d5:66:d2:ac:83:4b:89:9c:ad:2e:e8:
         86:ef:60:a7:26:c9:6f:4b:b9:60:e4:9e:89:ea:63:13:b5:a0:
         ab:91:8e:e1:ed:96:bd:d7:8f:be:c8:ba:38:21:6a:ff:9a:a8:
         2d:84:a8:c6:16:51:bc:a7:f6:07:8f:ca:d0:38:02:be:44:54:
         28:92:c2:a9:c5:09:ed:7f:fd:68:ff:80:82:47:9f:35:9c:fe:
         f4:be:58:5c:5d:b7:67:8a:4c:93:e7:96:06:7f:5e:e9:13:fe:
         db:7f:21:06:50:cc:4a:fb:27:1b:29:5d:ab:dd:b2:7c:de:cc:
         a6:ff:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----