Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
File:                     WHO1mFUN9b_byZp6HjlsNJW9qDs.cer (raw, json)
Hash identifier:          yAZLU9AjYKq3oevuU3MVBxB8SlHCgou/u037GQPqCZI=
Subject key identifier:   58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC37EEDF7B2C883DAF88303B874B5D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 130.82.0.0/16
                          IP: 192.41.141.0 -- 192.41.145.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:37:ee:df:7b:2c:88:3d:af:88:30:3b:87:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:c9:fd:9d:db:6c:e8:94:de:56:2e:d5:25:
                    6f:fe:2a:7a:0e:e8:eb:26:15:db:0f:32:7d:9c:68:
                    99:d0:0c:0b:52:be:41:93:41:13:06:fa:ee:80:af:
                    9e:45:b2:54:29:df:87:b3:77:b0:cf:cc:f7:ce:de:
                    3b:f8:d8:1c:9c:6e:cd:ae:60:75:eb:43:cf:d6:c5:
                    1c:d9:7c:83:68:15:01:5f:3d:b3:97:f4:85:45:08:
                    77:84:f3:31:4c:d9:32:07:d6:98:86:26:31:80:31:
                    2d:68:a1:d3:e9:7d:cc:b2:d6:92:f0:dc:25:ea:4f:
                    0f:b1:64:0f:a0:26:8b:b4:99:e2:56:44:3e:7b:0b:
                    3e:86:0a:af:6e:65:eb:83:10:9f:50:3e:f1:3c:24:
                    50:60:ba:90:49:71:6b:22:6a:d9:ba:7d:73:3f:33:
                    a9:1d:ac:7b:14:28:ba:e0:9f:61:8b:10:63:0f:b3:
                    c1:45:b6:f5:8c:36:4a:64:f6:8f:83:4c:25:e5:da:
                    b5:e9:6c:b3:97:05:cb:bb:b6:9f:c7:28:98:93:1d:
                    d4:f2:c5:a1:5a:65:09:a9:76:fb:23:07:94:a1:96:
                    1d:bf:c1:6b:3b:06:22:b0:12:6a:5a:3c:be:38:7a:
                    41:a2:3c:03:63:fc:f1:02:a1:34:35:f8:e0:d1:f6:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.82.0.0/16
                  192.41.141.0-192.41.145.255

    Signature Algorithm: sha256WithRSAEncryption
         09:6f:42:40:6a:13:bc:79:bf:16:08:35:0b:eb:4d:39:71:22:
         d8:9f:3c:22:9d:c1:e0:67:5f:cc:3f:90:2f:70:c0:57:01:5c:
         78:ab:93:64:b3:35:c3:d9:79:be:f9:ba:6c:bf:de:28:ce:c5:
         23:60:00:25:a1:8f:1d:48:f5:11:60:ec:d3:73:dc:ce:dd:8c:
         8a:93:45:a1:e1:31:8b:6c:a8:87:bc:4b:b4:a5:e0:4d:d7:72:
         fd:7a:ba:2d:a2:0c:3c:7e:d5:96:57:2f:fb:33:fb:aa:21:e8:
         ee:86:c2:45:e8:1a:f8:d6:b1:81:fd:1d:5b:ad:65:4a:2f:31:
         b2:78:d9:a1:4e:4e:83:ca:99:1a:03:ef:0c:19:b6:51:f1:35:
         5c:d0:cc:d7:7a:af:46:eb:24:22:39:64:0b:11:1b:d7:af:0b:
         1c:d1:45:b0:1d:4f:5c:96:2b:7c:68:01:29:ad:d7:76:45:54:
         16:2b:e0:46:90:f4:77:6b:33:99:89:d6:e6:7e:4b:ce:a8:fe:
         3d:db:6a:fc:a7:32:f9:56:ab:ee:ab:52:8a:8f:23:47:3e:81:
         c9:26:9a:27:0f:f7:ec:d4:06:19:be:18:59:23:64:e7:96:8a:
         d7:4f:f7:ea:1c:8e:78:a1:9d:77:3e:f5:75:7a:7d:d3:77:f5:
         f7:da:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----