Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
File:                     WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer (raw, json)
Hash identifier:          rQpnXInYWLlWDdG8BFnwftgWS9fyQVJ4nIGuELqbBI0=
Subject key identifier:   59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195A98157D43FC0D9CAC2589A9DDEF644D4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Mar 2025 13:46:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 52049
                          IP: 185.128.48.0/22
                          IP: 2a06:cd80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a9:81:57:d4:3f:c0:d9:ca:c2:58:9a:9d:de:f6:44:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 18 13:46:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:b6:99:e5:f8:73:86:33:82:78:2d:04:92:
                    58:54:aa:2b:d5:ed:14:0f:58:60:28:f2:65:db:fc:
                    3c:9d:dc:46:e6:4a:f8:7d:f0:a5:56:ce:7d:2c:78:
                    9e:92:0f:2e:1b:da:0a:a2:d7:ec:e6:71:33:3a:fe:
                    8f:db:2e:3a:28:72:00:f4:0d:b4:90:54:b7:37:cd:
                    c8:49:1b:9a:54:72:42:bd:c5:9f:cc:fa:53:77:87:
                    01:cc:29:0d:f8:e0:05:ab:8a:2b:97:4a:f2:a4:94:
                    07:be:4d:61:0d:2b:ad:f8:c6:8c:d5:80:ff:4a:d2:
                    c7:82:d7:58:ff:a6:89:d2:a1:78:d9:ac:cd:32:33:
                    1d:6c:d8:ab:89:aa:58:3c:2a:3a:6c:0c:27:7e:4a:
                    32:44:db:5e:75:93:44:ed:e7:15:e4:39:8c:02:01:
                    33:75:7e:9b:17:78:af:0d:e6:39:14:1c:23:33:fd:
                    81:9f:b0:92:f1:3f:a0:45:25:af:7e:2b:51:3f:ad:
                    1d:98:bc:31:09:66:c2:e8:e3:a0:f6:10:a0:8b:75:
                    71:9e:bc:5f:a2:54:1f:45:17:2a:d0:4d:c3:09:d5:
                    c6:c5:40:9b:7e:a0:41:10:df:18:99:d0:48:44:73:
                    6e:7a:fc:83:f3:24:ed:0f:9c:cf:3d:77:1c:be:86:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.128.48.0/22
                IPv6:
                  2a06:cd80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52049

    Signature Algorithm: sha256WithRSAEncryption
         a3:1c:5a:af:d6:58:61:fb:f0:d5:87:5c:fc:3a:ad:41:1f:70:
         94:e9:81:ae:26:2d:7c:82:cf:ff:04:5d:62:8d:d0:ef:70:5b:
         9a:26:f3:89:90:7e:6c:32:cc:1a:57:26:d7:b5:97:fa:dd:5d:
         f5:18:28:1f:c8:8b:b6:18:67:ea:9b:d5:39:42:24:51:d0:f4:
         65:57:99:d0:82:46:4b:84:65:e6:0c:26:6e:d7:72:7d:f1:b7:
         05:85:64:16:70:6a:9b:95:86:74:5b:6d:92:2e:d0:9e:8e:44:
         ad:bb:99:31:7c:6a:c6:ba:a4:4c:ab:9f:61:39:76:e9:86:f5:
         f8:cf:ce:1f:40:7c:df:91:13:93:db:b6:43:3b:43:54:72:bd:
         40:99:13:ad:45:98:94:59:6a:d4:53:82:12:93:2f:b2:15:14:
         53:69:99:74:89:7d:59:9e:d7:ad:3e:c4:ab:e4:14:ee:7a:ab:
         95:4b:b3:59:8b:66:04:67:9a:ae:86:d3:8a:f1:37:6d:23:cb:
         f7:d7:92:ac:98:7d:e2:59:28:f0:15:b9:fa:f2:c1:78:04:f7:
         df:e9:ff:5b:b8:84:a4:13:13:a3:8c:19:fc:69:1a:40:ca:64:
         a8:b7:79:a6:55:9f:79:ba:a1:c9:f5:08:43:77:74:3d:3c:ac:
         59:9b:f8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----