Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
File:                     StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer (raw, json)
Hash identifier:          /28M3EYno2drgqIHsmHKFeHN5JCCq3Cdf8WWazpGd5c=
Subject key identifier:   4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB64985B403B2FB1971D7A8B04F4D6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 5.149.32.0/19
                          IP: 185.74.132.0/22
                          IP: 2a00:d360::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:64:98:5b:40:3b:2f:b1:97:1d:7a:8b:04:f4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9d:21:e0:f3:be:45:89:dd:6d:7f:4a:da:84:
                    4c:b8:07:73:5d:c0:22:8b:f2:18:f3:24:73:69:90:
                    c7:e8:30:43:40:52:3b:6c:09:00:21:5a:45:e7:99:
                    fe:ac:ad:08:52:60:89:73:17:d5:6a:f1:63:ea:09:
                    6d:59:ce:78:e9:af:c1:8e:d9:78:17:c2:3f:45:0f:
                    06:0f:16:a0:f2:72:a5:e3:11:70:48:75:9a:89:36:
                    6e:b4:2b:58:52:a0:3c:09:e9:35:bf:68:a3:ea:0f:
                    3e:1a:80:45:88:68:6a:43:a7:82:58:03:ff:90:a5:
                    4d:3c:b1:6a:28:22:f9:72:38:87:b9:37:e2:c7:4a:
                    6f:cf:94:ec:78:35:29:ad:4a:ec:1a:72:f2:94:4a:
                    44:8e:a8:07:d4:ef:cb:30:36:85:b8:79:da:d7:72:
                    3b:09:8a:d0:b5:6e:c8:5b:e2:38:e2:26:d4:30:05:
                    16:f8:a9:10:cd:71:ac:26:09:7a:0a:b9:44:34:dc:
                    8b:25:d9:b1:35:d5:19:e6:dc:cf:35:74:59:9d:34:
                    c4:53:51:75:2e:72:09:8f:d2:31:a0:e3:70:55:c4:
                    08:01:67:03:bc:6a:4c:c0:5a:3f:94:d1:c0:aa:86:
                    a9:85:be:cd:39:5b:ae:dc:08:3e:24:8a:a0:60:50:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.149.32.0/19
                  185.74.132.0/22
                IPv6:
                  2a00:d360::/29

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:b2:c8:23:c5:d3:e8:cc:50:d1:e9:a1:9a:f2:b5:ff:f2:
         0f:45:bc:62:ed:5f:b3:76:e3:b3:73:04:78:b4:7b:89:04:f3:
         3a:1d:f8:04:9e:99:f7:af:d1:75:85:dc:ed:a0:ed:88:27:04:
         27:7e:ab:4c:1c:8e:97:2e:29:41:a2:dc:d2:ba:e3:70:b5:68:
         4e:1c:d1:4c:4b:96:f3:1d:50:0a:00:86:eb:3c:52:1e:59:e5:
         a5:eb:2a:3e:d1:32:ba:c8:35:87:cb:8f:f9:0b:bd:80:c0:a7:
         d6:e7:f1:07:73:4d:b6:20:fc:70:41:c9:aa:e4:00:3f:5e:23:
         3c:2f:3e:81:a9:df:08:17:67:c2:76:ab:c0:d7:e1:86:8f:f0:
         d9:5b:c8:14:ad:ec:85:d5:0e:00:72:c2:79:a0:bf:06:50:04:
         4c:2c:c1:78:44:f6:c2:70:6d:cb:6a:1b:1a:ef:5e:00:3b:02:
         75:a6:91:a1:29:96:0e:90:ad:c7:99:05:c1:ef:9b:dc:44:a3:
         ef:ee:96:47:ea:f6:42:00:c1:54:d7:67:45:4f:19:a7:bf:96:
         90:ba:ce:bc:17:23:89:5b:16:13:70:51:63:3a:a7:7a:6f:ff:
         c4:54:9f:9b:d1:53:ab:15:ae:49:dc:25:ee:66:b3:d6:85:70:
         58:8e:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----