Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
File:                     WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer (raw, json)
Hash identifier:          LzeoHI3JScN1R0rpnLJhHPZelA3X3D/Pj0i8lYRHiU0=
Subject key identifier:   59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D596FF2586B3DC2892F630ADB4537F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 29503
                          IP: 89.207.40.0/21
                          IP: 217.146.32.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:96:ff:25:86:b3:dc:28:92:f6:30:ad:b4:53:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:b0:e6:37:dc:15:33:4b:69:10:62:31:6f:
                    e9:48:a7:3f:86:52:6e:c3:59:5d:25:5e:c3:d3:ef:
                    53:7d:11:c7:3e:be:1f:d0:b8:7e:8f:38:0e:fe:a0:
                    14:fa:54:b5:74:34:cb:1e:fb:a8:18:97:fe:4d:02:
                    90:6c:fc:c2:c8:df:93:ed:bb:8a:45:52:45:53:b4:
                    0d:36:2b:7c:6b:55:13:f3:46:b0:e7:f0:6e:83:c6:
                    57:14:ec:82:25:7d:ad:56:5a:81:2f:68:a0:64:42:
                    a9:a5:97:38:b4:aa:22:f0:bd:0a:cc:aa:19:1e:fc:
                    db:7c:21:8e:22:91:6c:5b:b8:4e:6b:b9:6d:f8:2c:
                    bf:25:99:67:70:fd:30:d2:61:e7:63:ac:fd:70:19:
                    9a:e6:bf:e4:7a:20:40:59:76:1c:81:fe:17:57:d3:
                    a4:9e:17:a2:cc:9c:ad:04:cf:10:b1:4d:8c:c7:61:
                    2e:c7:43:55:c6:cf:9d:91:f4:e7:d4:a1:08:f5:ee:
                    5c:55:fe:bd:4a:32:46:ff:51:03:96:a0:95:df:fe:
                    30:a8:6b:8c:24:dc:66:98:3c:3c:3c:01:52:50:ca:
                    83:43:ac:c7:8a:c9:89:d8:4e:d0:ed:49:95:5e:5f:
                    03:d9:fc:37:d3:c7:c0:ea:f3:a7:c6:7c:1a:7b:6b:
                    84:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.40.0/21
                  217.146.32.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29503

    Signature Algorithm: sha256WithRSAEncryption
         1b:4a:e2:f3:18:be:44:02:2e:30:05:8f:4b:aa:9f:8c:e8:7e:
         47:24:fa:f6:86:7a:fa:51:16:6c:3e:00:b4:42:24:b2:27:74:
         9f:8d:06:54:e3:dd:d2:ac:f4:92:b9:14:6f:2a:dd:32:8d:89:
         ee:05:a0:ab:00:d0:79:ef:fd:fe:85:ef:8e:6a:81:df:be:2d:
         7f:3a:f9:1b:40:c6:bf:e2:5b:66:68:ee:74:89:1d:2f:d4:56:
         9c:4e:31:1d:c4:0f:8a:88:c0:84:5c:98:72:d2:72:59:6e:fe:
         9f:ad:37:d0:79:ca:68:28:27:e9:c8:b1:7a:d3:9a:6c:84:a8:
         71:dc:1f:ec:ed:7f:2c:60:f8:09:a7:eb:cb:a0:9d:c6:6c:fa:
         a9:c8:e7:68:05:13:64:4c:31:58:92:c3:46:a9:65:90:fb:7a:
         75:5a:12:31:39:e3:39:62:b1:c6:13:ee:35:15:4f:f5:ad:7b:
         da:87:f6:6b:8b:9d:a4:6c:83:43:a9:4e:5f:57:78:74:f9:8e:
         81:61:17:76:26:4b:d5:1c:88:51:50:2a:0b:83:5a:f7:99:a1:
         d8:66:3c:6e:b7:b2:18:b6:37:58:eb:85:c5:99:2b:64:66:e3:
         bd:1c:6a:44:69:44:35:15:91:e5:5d:c6:1a:cc:59:1a:23:4d:
         55:59:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----