Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
File:                     WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer (raw, json)
Hash identifier:          jQmiU/nt8HdBuPKtMWSo5IWC4iNlKG5MOixc+AeLM+A=
Subject key identifier:   58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D96445128777E6802D68517C7491C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.228.234.0/24
                          IP: 2001:67c:1314::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:64:45:12:87:77:e6:80:2d:68:51:7c:74:91:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=58a763f0c467abaa701d968c3749c6dad03489b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:03:ca:f3:42:1b:a7:ae:2f:83:32:48:2c:
                    3f:bf:c7:ca:a1:11:7d:0d:59:a0:d8:f5:93:ac:49:
                    bb:b8:ce:3d:68:c1:2a:c7:0f:9c:fc:2a:c8:e0:0f:
                    65:22:cb:d8:e8:8e:58:e4:14:1e:ca:ec:b9:ec:25:
                    b9:05:1f:cf:1e:c5:d1:e1:78:32:71:0c:4e:76:d0:
                    fb:35:8b:fd:4e:8c:eb:0f:11:73:b5:67:a7:8c:3d:
                    8a:c9:84:0c:b8:88:dc:a7:12:c4:b5:26:55:05:a8:
                    c8:64:b6:e4:02:5f:20:a3:1e:5d:55:98:f3:e2:c9:
                    63:fb:03:61:e4:57:a8:ce:0c:a3:4a:93:c0:a8:2f:
                    59:c1:fb:0f:80:55:e7:21:41:06:42:8d:6d:22:fc:
                    f3:e1:7d:19:9e:26:0b:9a:7d:08:d8:07:ba:90:5f:
                    7a:80:a0:9b:20:a2:ab:c6:6d:c5:02:fb:4d:bd:a9:
                    ed:62:50:1e:86:ca:88:50:b5:c8:6c:a7:55:9e:41:
                    7c:5f:5d:1f:05:b6:bb:df:59:8f:9a:45:a9:94:55:
                    77:b4:52:7f:03:9f:6c:84:37:b1:68:90:d5:8c:2e:
                    e2:62:6b:5e:de:58:d6:99:69:76:5a:80:87:20:e6:
                    cc:f0:83:bc:de:20:5c:3a:3f:31:2e:ec:55:84:9e:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.234.0/24
                IPv6:
                  2001:67c:1314::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:fc:33:4b:d7:08:c9:ec:47:6f:ae:21:95:6f:f0:55:1d:
         2f:6b:d5:0b:7b:29:91:71:44:34:85:28:e7:cb:0c:de:23:82:
         08:dd:fe:d6:2f:93:1c:fd:f1:38:5e:c3:11:45:3c:ac:b5:05:
         37:f3:18:a1:e3:48:89:9a:6c:c4:b5:20:03:71:6f:6d:da:48:
         1a:09:69:6d:b7:9d:4f:5f:17:a4:1c:a3:d6:a2:07:f3:a2:90:
         ed:e9:23:1e:e3:51:c3:eb:69:93:0a:1f:86:f5:ea:af:b0:99:
         7b:8d:4d:f6:b1:71:74:d6:b8:16:98:97:f4:5e:42:f6:bf:60:
         b5:76:37:83:48:8e:71:e5:b9:28:e6:ed:8e:9e:89:89:f7:7c:
         4c:83:69:e5:cf:34:4e:54:18:81:ac:c0:0c:4c:c3:e3:49:26:
         e9:68:24:86:7e:79:19:80:d4:1d:75:4b:c1:3d:80:30:2a:d8:
         50:fa:2b:e4:e8:d7:d3:8d:18:04:a7:0d:82:ac:70:83:c3:24:
         ef:f9:24:eb:69:ba:45:ec:02:f8:db:3e:2d:51:7a:48:de:36:
         f7:96:8f:6c:7e:35:d1:a8:29:d5:13:37:b6:09:cf:b4:ed:59:
         ac:b8:83:6a:4e:90:88:5c:80:80:4d:1d:e7:42:6e:e9:8d:40:
         ec:2a:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----