Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
File:                     VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer (raw, json)
Hash identifier:          QNqgxpjfXOteTEovFn9/QE48P5lKr4fa2j8pmrL7/DU=
Subject key identifier:   54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA501EC63DC1B424EDD6A3666A77B6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 176.111.173.0/24
                          IP: 2a13:940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:50:1e:c6:3d:c1:b4:24:ed:d6:a3:66:6a:77:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:fc:10:b7:0a:c2:18:73:10:03:c8:d8:31:
                    87:86:2e:53:eb:b4:67:3c:f4:6d:9a:d2:19:92:3f:
                    d6:2c:49:13:67:13:da:ec:14:0f:6c:e8:f4:9c:4e:
                    61:4e:7b:db:ba:6c:94:7e:0f:a0:b6:52:14:30:eb:
                    01:cf:c0:53:02:cf:f2:3e:76:d3:ca:7b:b6:7d:ed:
                    70:c3:19:a3:16:48:8c:42:02:5e:fe:1d:c9:9d:e3:
                    ec:dd:05:5a:ec:e0:5d:d0:dd:0e:3d:e8:80:9f:02:
                    b7:92:28:50:ce:87:82:e9:c3:a8:4d:ae:2b:b9:5c:
                    8c:b9:0a:0e:e0:69:ab:07:39:96:8e:9e:7e:b1:47:
                    85:58:9e:0a:5a:83:3c:2f:b9:7a:3a:46:8d:07:21:
                    f5:ab:8e:39:10:cb:9d:0b:e4:da:25:96:11:08:d2:
                    64:59:48:e2:8c:bf:77:6c:a5:f6:9c:75:bd:73:b5:
                    bd:8d:75:45:7e:2d:be:1a:10:f7:75:77:32:aa:ff:
                    b5:4e:5a:fe:4b:06:c7:07:90:f0:d4:b5:9d:14:e0:
                    94:de:79:f8:77:e3:23:ac:2b:e7:8a:08:df:96:ee:
                    77:d3:9b:16:b1:b9:8b:2d:70:07:90:29:e0:4a:55:
                    8e:4a:ec:ef:f6:19:26:b3:3e:1e:82:72:92:9d:19:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.111.173.0/24
                IPv6:
                  2a13:940::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:cc:2b:9d:16:a3:95:0f:60:66:4a:f9:dd:76:2e:84:7d:23:
         31:62:ca:ad:69:80:59:20:49:42:69:bc:e7:b2:67:7b:92:8d:
         55:44:0c:86:01:e1:26:d5:4a:ee:19:df:21:0f:d3:7b:09:d4:
         54:26:a1:62:08:63:a9:b8:0c:9d:88:88:a3:4d:8c:e0:9b:a1:
         c2:7a:fd:2b:0d:b4:85:39:67:71:d7:d2:90:a7:38:18:c0:d3:
         a9:98:27:b6:67:45:46:4e:52:4e:da:94:c2:e8:5c:c8:98:da:
         13:32:05:c3:7a:f6:a5:9b:cd:9c:e4:50:0b:c7:e5:82:ac:11:
         d5:58:1c:04:b9:96:1b:e7:ff:51:81:fd:09:6a:34:d6:34:5c:
         f4:a0:92:43:07:6c:89:47:41:74:a6:37:6f:ae:5f:45:61:40:
         14:87:5f:a5:8d:6a:69:18:e0:8c:77:ca:9d:f9:25:06:cc:8f:
         9d:ab:59:aa:ab:29:d0:e2:4f:49:78:be:5f:44:ef:ba:90:a9:
         d3:49:c1:66:ba:14:44:67:2b:35:3e:f4:c1:ba:f1:4a:10:28:
         7b:f5:57:75:98:a8:f4:fd:c2:b3:09:33:6c:37:58:bf:ff:27:
         e9:85:15:e2:f1:42:6c:8b:28:a5:93:10:a9:45:17:95:14:4f:
         a3:23:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----