Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
File:                     WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer (raw, json)
Hash identifier:          ziC+B03WXsmgVRi1wwLKbJPR1Ul/LUtiYKR7wn2KWZc=
Subject key identifier:   58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B584EE78C3BB11444EFF564D28BE19
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59874
                          IP: 185.68.36.0/22
                          IP: 2a05:1580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:84:ee:78:c3:bb:11:44:4e:ff:56:4d:28:be:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:06:4f:96:49:31:b6:6e:28:fe:fe:9b:58:
                    25:8c:81:84:55:69:6e:ba:94:21:3a:8a:70:c9:28:
                    f4:e6:bf:63:74:1b:2c:d5:a8:98:06:a3:95:4c:fc:
                    f7:3b:8e:6f:2e:45:7e:2f:54:e5:8e:31:d1:cc:74:
                    ab:6a:6c:c5:12:35:68:51:d3:0f:66:53:7c:3e:67:
                    dc:f3:cd:3d:b4:81:50:ff:f6:14:32:e4:ac:00:21:
                    af:2b:43:02:e8:63:4c:41:b4:fd:c4:cf:cc:02:b5:
                    9b:6b:e6:9d:3c:02:6b:ed:c4:32:5a:1c:e9:78:3f:
                    d3:a4:2b:dd:aa:1a:8b:f5:ec:62:15:8b:54:aa:e7:
                    e0:eb:ca:49:cb:3b:68:ff:8d:be:0b:65:6d:50:76:
                    3c:a9:81:be:4c:6e:c4:77:76:04:e7:5b:78:16:60:
                    dd:6a:2d:4a:65:ef:55:b3:a0:11:c3:eb:b6:a9:45:
                    85:b0:70:4d:f8:51:1c:fa:df:88:c3:02:87:56:c2:
                    dd:9a:5c:71:95:27:75:a6:f8:58:e4:c5:08:85:79:
                    f1:6c:67:83:14:6a:69:fe:da:ea:a2:8e:e6:d1:aa:
                    96:cf:96:17:6e:14:31:63:be:da:7d:3f:63:f9:ea:
                    bd:11:da:09:12:ff:18:cb:5d:67:ea:5f:61:47:20:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.36.0/22
                IPv6:
                  2a05:1580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59874

    Signature Algorithm: sha256WithRSAEncryption
         4d:3b:db:71:2e:f3:37:b0:9a:86:64:46:97:2b:dd:3d:23:a1:
         39:68:79:7c:3e:0c:a8:3c:d6:16:08:d8:03:b4:49:b1:8d:e0:
         cc:75:58:f4:28:74:23:ce:38:67:b2:74:02:42:8e:be:a7:7c:
         a4:31:2c:69:37:d2:45:02:7a:ac:e3:03:8b:92:b4:10:8f:93:
         8c:ef:fe:c9:12:a6:d0:d7:19:b8:5b:79:b6:3c:1f:21:cf:7e:
         39:f7:76:ea:15:f9:1f:15:c8:e9:69:17:f7:1c:f0:35:8f:b2:
         49:cf:21:1f:d1:cd:0c:45:ce:df:53:5e:e9:35:e9:80:96:f2:
         75:3d:a2:ce:cf:92:ac:ca:7a:52:06:1a:2b:cc:b0:0f:c4:02:
         bb:ce:90:3f:ed:76:8b:38:2d:fd:45:8b:34:21:2b:7a:9f:2d:
         87:14:d1:b3:e1:85:1e:d6:16:3e:65:fd:f3:d9:b7:48:5c:05:
         10:f4:cf:b0:fc:4c:b0:c9:bb:f9:c3:a1:26:33:53:ce:36:9e:
         71:60:88:5d:be:bd:87:19:c2:44:e9:b1:4c:0b:65:0a:52:70:
         ea:bc:f0:c1:8a:5f:14:f4:09:e8:5f:4a:0c:3c:33:a2:7a:57:
         5c:93:b7:24:e9:15:24:fc:e6:45:fc:58:d6:10:1e:01:3f:19:
         e3:b5:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----