Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
File:                     VdCGNM-l6BZpPCt54ui4ruuvWXY.cer (raw, json)
Hash identifier:          AazTnO/MdnZ/163Bsjx+gl50DknTmh8wZDZH1gG9bkg=
Subject key identifier:   55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D90C55C56ABA6C69A517EE358FADF5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201111
                          IP: 185.82.240.0/22
                          IP: 2a05:9600::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:0c:55:c5:6a:ba:6c:69:a5:17:ee:35:8f:ad:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:26:8c:9c:28:96:f0:27:ad:8d:e6:9f:79:
                    63:e5:47:24:11:ff:35:e9:74:bd:69:0f:0d:e0:57:
                    69:58:36:34:0c:a5:59:23:6c:08:67:5e:e9:6e:1f:
                    5f:9b:c9:b5:c7:58:73:98:6e:70:cd:55:33:75:3a:
                    c6:62:ad:16:6a:6f:aa:e4:07:1f:ba:ee:e0:64:d7:
                    05:e4:a5:e6:26:4c:7f:19:e5:f7:fb:26:48:ce:3f:
                    ca:5a:7a:a7:62:67:8b:4d:87:c9:c9:59:8b:0f:99:
                    19:91:f2:46:86:e2:67:05:af:db:61:db:4f:46:27:
                    5b:a4:ea:54:cf:c0:d9:b2:5a:55:fd:9d:04:46:e4:
                    5b:c0:f7:2f:56:03:d6:05:c6:b2:08:ae:70:46:26:
                    85:5a:c1:44:1e:54:be:fb:48:b3:90:63:80:7a:fe:
                    58:fa:b4:77:4c:84:e9:54:7c:b3:f3:fc:b6:b6:29:
                    20:10:a6:f0:30:a4:dd:06:47:1f:2c:cb:ac:b4:f5:
                    33:83:6c:45:a4:3b:28:72:87:42:fb:77:0a:d4:8d:
                    40:5a:62:29:85:3b:b2:d7:1d:8b:52:6f:78:ac:34:
                    e8:76:e5:3e:1d:4d:90:97:d0:31:fb:c7:49:8c:c6:
                    8e:27:8d:df:74:50:52:08:f5:b7:fa:01:df:6d:25:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.240.0/22
                IPv6:
                  2a05:9600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201111

    Signature Algorithm: sha256WithRSAEncryption
         66:6c:f7:16:9f:2a:04:10:33:cc:b7:f5:e2:82:31:6d:15:ed:
         c4:f6:c4:99:0b:a0:ab:98:4d:11:3e:52:62:9b:08:8d:d6:c8:
         1e:21:1b:81:cc:f6:ca:03:16:3e:c8:22:45:0f:74:d6:1c:62:
         ef:e2:52:e7:66:4d:52:24:ed:9c:28:0a:b8:9d:43:c0:41:29:
         c5:b8:0d:70:d6:8b:1c:77:7e:cf:31:6b:22:74:56:53:d3:57:
         8b:0a:b4:71:79:80:cd:fd:17:81:c2:d0:97:19:35:a5:88:fd:
         00:fb:aa:c1:6f:6a:33:b1:e9:41:0c:36:7a:c5:b3:2f:ef:5d:
         60:5b:14:6b:23:49:0c:47:5e:8a:45:46:39:b8:c3:73:ec:4c:
         c7:85:81:8e:04:13:ac:1e:9b:f7:df:d5:89:9e:94:90:ab:db:
         4a:3c:6c:b3:12:5b:67:df:65:7f:c8:7b:17:fa:99:e1:ce:11:
         25:2f:63:0f:72:ec:bc:b0:f7:01:59:08:1e:a5:a2:39:ec:2a:
         04:41:48:0e:c9:37:df:87:08:75:75:6a:1c:1b:42:5a:78:3c:
         60:aa:8c:ef:01:76:bf:b7:97:50:f9:80:d6:d4:0f:81:37:4a:
         ba:98:6a:e3:a4:7e:ed:2f:66:c9:2a:e7:1f:62:38:03:c4:01:
         07:80:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----