Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
File:                     W1mW18RE1mpSvKEBsGynOKf8qps.cer (raw, json)
Hash identifier:          PSAaLyu1AFMmL2AT6lBe2TvfAyvs0vc3BZ0HpoxeNCI=
Subject key identifier:   5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019514B40F9F2F6DC44562569CD4343B93B4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Feb 2025 16:18:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47759
                          IP: 178.173.0.0 -- 178.173.123.255
                          IP: 2a07:3480::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:14:b4:0f:9f:2f:6d:c4:45:62:56:9c:d4:34:3b:93:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 17 16:18:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:a8:2b:f7:6a:fa:06:9c:1e:b4:1c:ce:b3:
                    85:7f:bd:42:61:bf:c9:46:3e:26:0c:cf:fc:7e:b3:
                    26:2d:de:88:ab:e1:f7:7a:c4:ce:a3:f2:56:6e:5c:
                    12:00:bb:6f:78:ee:c1:2c:bf:e6:80:20:19:20:b4:
                    86:28:33:41:65:2c:c9:04:29:7f:eb:1d:d8:a2:e6:
                    af:e1:d2:fc:12:1e:4f:dd:13:e2:fa:4f:d4:09:58:
                    c3:02:ff:55:26:b9:3c:39:2c:bc:d3:50:50:f8:8e:
                    ae:50:87:ce:e9:33:f4:7d:11:b1:14:01:cf:a6:7e:
                    ad:84:6e:4c:e1:55:f3:7b:56:18:38:f3:21:38:2c:
                    9a:e7:aa:8e:5c:98:56:f4:ab:a5:02:95:63:6c:8c:
                    e0:90:17:df:f8:21:db:35:73:22:84:81:5c:1d:de:
                    90:51:8f:d3:f4:08:ee:19:78:3d:27:b8:3c:4e:fc:
                    ed:f7:3b:87:37:81:35:f4:eb:16:5c:72:b3:35:d3:
                    3b:64:59:33:b4:cb:a6:34:6b:14:72:b1:d8:9b:2b:
                    07:2d:7c:e2:15:50:c9:6a:76:04:e7:86:22:e3:bb:
                    17:ab:aa:5e:39:19:9a:ab:5c:09:73:5b:db:9b:6b:
                    f8:5b:0d:f9:25:a4:a3:9b:bc:c3:c6:61:cf:cb:6b:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.173.0.0-178.173.123.255
                IPv6:
                  2a07:3480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47759

    Signature Algorithm: sha256WithRSAEncryption
         93:5d:09:3b:92:9e:cd:dd:7a:21:04:5a:2a:89:eb:59:14:b1:
         24:dd:64:68:7c:d5:5e:bf:a6:fe:5f:3a:f1:93:e8:6a:9b:59:
         65:87:36:84:c7:ce:58:ab:63:69:75:c1:6c:15:77:19:b4:d2:
         01:17:29:4a:97:6e:2a:59:a9:26:c6:38:23:d1:e8:97:4d:65:
         e5:7b:f9:ad:a6:62:28:5e:a5:c5:bb:06:60:a2:bf:96:b0:ae:
         c6:34:01:b9:b7:7c:e8:88:b0:6b:b3:23:a0:08:88:b8:26:d7:
         49:cc:f6:92:08:48:02:2a:e6:84:77:cd:a8:0f:91:f7:f4:09:
         45:8b:e2:88:21:44:97:e9:f3:49:ab:68:2c:71:46:49:da:e6:
         c0:90:21:15:4d:a8:d1:70:9c:89:02:5e:c2:f8:9d:38:21:20:
         63:bf:5f:ce:d5:17:67:84:12:62:55:6b:ac:6d:8b:01:bf:6b:
         b1:a5:a7:e5:4e:28:12:0d:25:93:d5:02:d8:0e:de:7a:88:50:
         07:8a:a3:e2:c7:a4:52:cf:df:63:6c:f0:dc:1e:67:ee:9c:4a:
         d3:69:18:ed:3e:ea:4c:b4:18:7b:ba:60:0f:88:de:6f:0e:cd:
         fa:15:f9:17:fe:d8:51:f6:ac:b5:91:4f:b9:b9:72:58:3b:c3:
         29:6a:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----