Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
File:                     flNU4TNHCPGAASuyN6lfn6x6Tlw.cer (raw, json)
Hash identifier:          dPL3kSzq+X7R0NzLEj6tw1mL6aFHp0jXayanGXxVTBE=
Subject key identifier:   7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5A780D6BBC3107C838AEA74A1FB35
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.188.30.0/24
                          IP: 2a12:d940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:a7:80:d6:bb:c3:10:7c:83:8a:ea:74:a1:fb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:c0:82:22:3d:ec:36:40:8d:c9:77:9f:0d:
                    4a:9e:34:b0:ee:f7:26:d9:49:a2:8c:81:05:1b:f1:
                    49:c0:b9:5b:52:87:06:bd:cc:ba:f1:e9:d8:d0:e6:
                    da:d3:5e:0a:c2:22:83:09:aa:82:eb:51:ac:87:34:
                    ad:25:5b:9c:40:e1:dc:b0:ac:8c:2b:24:84:f7:6a:
                    84:67:6b:31:1b:67:ec:bf:5f:c7:c7:d1:75:84:8c:
                    ee:5c:73:ca:ba:7d:f9:b0:20:65:97:74:4a:da:99:
                    a6:03:6f:e6:a0:f7:9d:d1:11:69:2a:b1:b1:ac:67:
                    5c:14:c2:60:51:9a:60:18:bf:18:a5:af:8c:3a:97:
                    e0:85:50:fe:ef:be:be:9d:49:b1:8f:59:e4:13:71:
                    45:84:cb:85:78:8c:fe:5b:40:bb:0d:9b:78:4f:ae:
                    41:c4:d5:5f:c0:02:5e:cc:17:63:6e:71:93:ce:6a:
                    1a:ff:d6:4d:a5:bc:cf:46:0a:bf:de:bb:11:2f:07:
                    28:47:2d:e6:f4:a8:18:30:1d:af:f2:23:a2:fb:b7:
                    f7:8f:c6:07:e7:4c:1f:a0:88:e0:6b:3c:be:70:6b:
                    b2:d8:70:cf:67:ce:f0:a8:4f:f8:f5:78:91:c7:56:
                    72:65:73:29:a4:7a:ec:51:67:36:29:ce:7d:e2:ce:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.30.0/24
                IPv6:
                  2a12:d940::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:f7:59:55:ce:9f:ca:23:fa:8d:d3:b8:44:d7:67:5c:0d:e2:
         c4:28:58:71:da:db:90:68:45:a5:a8:67:21:29:64:e5:72:f2:
         ee:8d:fa:6a:6d:6d:d6:69:c2:10:2f:c6:03:b8:36:5d:12:2b:
         66:38:e3:7b:7e:da:c5:be:1c:d7:24:cc:47:50:0d:e5:34:65:
         44:f6:fe:1e:16:6b:35:87:9a:2e:45:fb:c6:c5:20:2d:8f:58:
         94:47:e1:9c:32:4e:c4:3c:02:11:12:02:47:d9:de:e8:1a:21:
         e1:5a:c2:5c:dc:8f:d9:38:66:cf:d2:44:d0:4b:81:cd:e2:d2:
         b6:03:e8:1f:87:5a:cd:21:08:72:9a:91:e8:e3:4a:0c:44:36:
         ed:f6:d0:a3:c3:ac:47:a1:aa:ec:0a:84:3a:eb:2a:8f:af:96:
         2f:1b:20:76:2e:46:e6:10:a1:10:45:32:1e:a3:8d:38:8f:cf:
         0a:da:d7:18:4b:77:08:32:bd:25:85:18:4d:80:59:8b:88:ba:
         73:e4:30:a8:b0:02:21:03:6b:f6:03:fa:c1:b7:6b:d9:a9:be:
         75:d0:12:7c:c2:f9:a9:42:67:c7:16:32:94:4a:65:7d:5b:f3:
         ca:50:4a:7f:2c:c6:28:8a:0c:e7:f8:af:7b:8c:04:a5:f3:15:
         5e:79:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----