Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
File:                     WUmzHrtuTLvQzHcMxvTVD3jw63s.cer (raw, json)
Hash identifier:          1aa3xDtqK8lCvUIo8qcPyCZNhQ7uUj/1qM7Jz+VB2FQ=
Subject key identifier:   59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5DBB421BAA3D30086DBDAB99B647D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 16236
                          IP: 194.56.231.0/24
                          IP: 194.104.188.0/22
                          IP: 2a00:ec20::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:db:b4:21:ba:a3:d3:00:86:db:da:b9:9b:64:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:5a:fc:f6:be:e2:d6:f1:3a:84:42:4a:f9:
                    8f:ac:f2:b2:29:85:74:70:ec:f4:c0:37:1d:a7:96:
                    83:e0:b9:c7:1e:28:97:de:60:d7:2c:17:7d:a4:31:
                    25:ea:b2:91:b9:ea:31:d4:b5:5f:72:68:e1:0e:b1:
                    72:7c:7a:98:5c:b2:7f:13:7a:f8:f4:5c:2e:37:5d:
                    d4:ea:4a:17:23:93:89:c6:3c:59:c2:5c:59:c1:30:
                    5e:2c:76:78:9f:7c:25:65:17:a3:57:91:54:b5:70:
                    e1:81:b8:cf:39:4e:bf:3b:4d:0f:a7:7e:76:81:ed:
                    e4:68:87:b2:8f:74:9b:4b:96:32:dc:0f:73:ce:f4:
                    2d:a5:cc:bb:44:4a:ca:71:ea:04:45:3a:9d:4f:10:
                    c4:b8:86:ee:fa:30:28:52:4a:c7:9a:18:6b:3a:3c:
                    41:0e:76:99:84:f0:92:f8:3f:be:bb:a5:17:b6:bd:
                    37:4c:f9:8d:46:17:c0:4c:60:58:e4:8a:84:fb:26:
                    51:ba:d1:ac:5a:78:79:3d:c8:cb:05:59:de:95:7d:
                    16:19:17:da:41:91:b8:b4:17:b7:9e:ab:0a:b4:e8:
                    5b:8b:c7:1b:2a:1e:b0:ff:d5:cd:67:ea:0d:25:21:
                    50:eb:dc:4e:eb:d8:10:5b:fb:d7:d0:cb:6c:6d:23:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.231.0/24
                  194.104.188.0/22
                IPv6:
                  2a00:ec20::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16236

    Signature Algorithm: sha256WithRSAEncryption
         a9:d8:ec:9f:e4:97:9e:16:cf:f6:b9:30:17:a0:89:43:e2:03:
         f6:9a:7e:4e:33:e2:da:5b:83:87:c8:61:a7:b0:25:ff:16:71:
         8f:25:96:a8:f9:3a:bd:1b:6f:4e:ed:e4:91:97:dc:50:11:3d:
         5e:4b:19:09:22:99:fb:ec:cd:f6:62:d4:f1:e6:db:50:dc:de:
         da:62:80:90:b8:83:5b:70:85:34:19:f1:71:2d:25:be:e2:16:
         26:70:2b:0a:bc:9d:fa:32:9c:d8:62:8a:66:a7:e2:53:54:63:
         ed:df:f3:90:c4:6e:ce:42:10:3c:66:7b:8f:00:ae:fa:e9:14:
         77:37:de:9b:85:0f:c4:98:a0:7d:7c:fa:d5:89:fd:83:c8:e1:
         0c:c7:ec:a8:1a:c6:ea:dc:2b:cc:04:8f:fe:5a:94:98:47:17:
         0e:e2:2c:23:8d:46:2a:c8:23:22:bf:b5:b4:8a:a9:76:ca:dd:
         8b:7d:2b:24:e5:ac:ce:d4:f4:da:0f:54:ab:4b:c0:30:ef:31:
         8d:78:da:a0:e3:d0:99:11:ba:1f:83:81:ed:22:62:70:0c:6f:
         4f:14:83:85:a0:b9:67:de:27:bc:2b:3f:ca:f2:54:e9:8a:d2:
         16:93:54:53:b6:c1:bc:2b:9f:aa:3d:bf:a4:5a:86:bd:12:3d:
         5f:f5:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----