Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
File:                     R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer (raw, json)
Hash identifier:          2wrjLbaDigrbyTfovWZvfA1cq4bTB/LECrnd20BIIqU=
Subject key identifier:   47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D61B5A2CDE335248651E5EFBA0D3AC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42718
                          IP: 176.117.62.0/24
                          IP: 2001:678:3e0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:1b:5a:2c:de:33:52:48:65:1e:5e:fb:a0:d3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:09:e2:77:4b:18:bd:30:ec:da:b5:2b:25:
                    4b:ff:f1:42:e3:0e:40:fc:0f:91:7f:73:3c:2d:ba:
                    29:14:17:8c:aa:e8:b5:b4:b7:d2:3d:60:b1:38:fc:
                    65:f9:c4:dd:c2:34:6b:82:a4:a7:e9:1f:83:45:5b:
                    44:b6:92:29:fd:d2:d9:bd:e7:b1:6d:8c:4b:7b:a3:
                    bb:60:19:32:1e:34:71:35:98:64:2d:29:44:25:a9:
                    b4:74:75:80:64:35:21:a9:0a:99:02:b9:d0:45:05:
                    fc:88:e9:ac:0d:d1:88:8d:36:8e:d6:69:53:aa:bc:
                    74:37:ca:06:3a:84:17:d5:41:c4:80:90:b2:67:e3:
                    5e:38:f2:e8:62:11:8c:e3:52:82:ac:17:4c:70:e3:
                    6a:da:aa:db:bc:da:f0:7f:13:6f:d2:59:4c:6c:58:
                    b0:40:38:5c:67:40:f3:56:c9:f0:ac:df:e1:2b:dc:
                    a3:3a:31:9a:e0:aa:af:d4:fa:16:46:d3:19:55:b7:
                    ea:20:be:ed:de:47:d2:82:a3:05:86:d1:28:62:a6:
                    45:d2:b4:0c:c5:9f:86:6c:48:b4:99:41:a7:d6:f8:
                    fd:96:b9:b4:12:9e:81:28:2b:49:fe:56:eb:8e:14:
                    8a:61:d1:9e:06:d4:87:20:e9:67:27:cc:56:4a:63:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.117.62.0/24
                IPv6:
                  2001:678:3e0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42718

    Signature Algorithm: sha256WithRSAEncryption
         1e:ff:fa:9a:02:47:4e:3c:03:2f:4f:df:c1:63:a3:ef:2f:33:
         84:92:78:68:88:16:54:45:93:3f:89:24:f4:ed:fd:d0:b6:75:
         01:00:1f:db:6d:b2:95:22:d2:41:9c:e3:9c:b2:fa:ca:20:d5:
         22:cb:c2:3f:38:b4:aa:7b:12:25:30:52:08:c1:db:39:a6:1f:
         b9:ac:ae:9a:6a:d3:1e:85:61:74:75:5d:71:15:02:fc:5b:f1:
         1f:aa:a3:0f:36:ba:72:27:23:da:9c:47:0e:df:58:a9:67:23:
         3b:c8:26:2f:24:1d:ad:24:b9:33:8b:0c:0f:ca:09:c4:e4:3a:
         b5:53:f1:a8:0a:e5:1c:e1:9a:25:4d:31:eb:c7:3e:8e:77:e1:
         f3:cf:1e:5f:6d:0e:d9:a0:43:34:31:52:0a:11:4e:64:41:88:
         9b:d7:ab:ee:46:5f:88:13:35:6a:d4:f0:84:32:a1:4c:00:4f:
         d7:b1:20:99:d5:1a:a6:ce:55:68:84:2a:2c:be:c6:13:ab:f8:
         47:0d:20:a0:97:f2:df:b3:29:34:ff:f6:fe:2f:4e:7f:4f:6a:
         92:a9:c6:a1:85:c7:e5:05:a6:25:d9:fa:ca:d7:f0:7e:14:67:
         6b:4b:d3:b5:72:ef:20:65:6b:04:0c:d4:a1:9c:db:84:3e:9f:
         70:ef:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----