Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
File:                     VHKdSdKy4Au8soU6dMvA6UZz8BI.cer (raw, json)
Hash identifier:          hxLCOlSNliTmyQO4algi05HaMdTYsCt/Y/21drD5rB8=
Subject key identifier:   54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C4CC325CE8A4183C09BDADB6CE4A7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41885
                          IP: 46.28.216.0/21
                          IP: 185.205.72.0/22
                          IP: 2a00:a1a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:4c:c3:25:ce:8a:41:83:c0:9b:da:db:6c:e4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:9e:37:46:c9:ec:6d:f6:5e:1b:6d:47:eb:
                    63:9b:e3:5d:8d:48:e6:a9:5f:b0:c3:79:df:09:fb:
                    1b:66:63:a5:83:f6:c1:01:78:5a:56:a3:d9:ca:0c:
                    81:6d:f4:5b:4a:f2:4a:70:00:53:bd:58:02:f5:fa:
                    f3:a7:f6:23:61:dc:62:8f:ad:9b:9d:52:81:b1:4d:
                    41:b3:53:b4:4d:1d:21:68:0e:5f:90:2b:52:0a:d9:
                    e4:05:92:77:c1:5e:9c:6b:c0:e3:ad:9a:f2:6e:2d:
                    0f:30:da:3a:5b:d7:5f:35:bb:03:ff:27:c4:b2:66:
                    12:0d:48:4f:48:f4:ad:7d:c8:9d:54:21:3f:20:ad:
                    c1:09:c9:a3:67:ce:23:48:42:3e:46:0e:03:ad:24:
                    8a:8e:72:d9:ef:e6:65:80:33:bb:46:5a:e6:31:c5:
                    37:6a:06:b7:4a:b1:ca:24:3b:cd:2c:0a:9f:a0:5f:
                    0d:b2:46:77:14:04:b0:8f:55:9d:bd:bd:a1:a8:9d:
                    9c:d7:89:c5:4a:c3:65:55:01:f8:e7:74:22:87:e7:
                    18:d2:21:00:14:1f:45:a2:9b:25:0b:2c:ce:93:41:
                    c1:4a:98:70:a4:ee:03:aa:d5:f3:d1:01:c1:1a:ee:
                    5e:3d:0f:ea:ec:b1:35:4c:06:1b:89:49:f9:90:23:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.28.216.0/21
                  185.205.72.0/22
                IPv6:
                  2a00:a1a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41885

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:9a:8e:5e:14:a6:91:ef:f5:1d:c9:31:28:f3:eb:13:9f:
         3c:7c:0d:bc:11:a1:59:1b:3e:d4:4f:af:4e:42:10:ab:57:52:
         ff:b0:4f:02:e5:53:50:1d:33:d9:81:74:05:ae:83:a1:be:44:
         f9:71:46:20:19:3d:79:83:08:52:f1:03:ca:4d:eb:11:b4:b3:
         25:b3:aa:ba:27:da:91:5c:15:ba:30:79:37:1e:56:d0:d6:84:
         9f:9b:c7:98:ca:30:b1:f0:f3:99:d5:6f:ec:10:25:e8:49:85:
         2c:76:5b:21:62:1d:5c:d5:39:71:40:fc:07:4c:48:d9:c1:6e:
         bc:7b:e5:b4:03:92:75:f1:79:32:83:ab:e8:f9:82:c7:9a:68:
         dc:16:f9:49:a3:0e:36:6b:15:f8:f3:75:5d:31:85:4d:85:eb:
         dc:d9:40:8c:e5:13:06:ff:81:07:50:f3:25:7a:07:8e:b6:7d:
         1a:e8:b4:8d:17:21:af:23:69:9c:39:11:c6:56:b4:b8:2c:77:
         32:54:11:1c:84:0b:87:41:9d:a8:88:2c:fe:2f:c8:34:73:5d:
         d0:d9:46:b2:6a:1a:f8:73:26:ee:19:70:71:ec:d3:cf:5e:2b:
         af:fa:94:67:51:00:e8:ef:50:9a:50:d3:df:1c:08:0c:f5:9b:
         49:5b:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----