Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
File:                     h7PLLW-2jm7bhEL-sKv8la61sVc.cer (raw, json)
Hash identifier:          Qk2bs3PViId4I112wCN1vi+PIp/r9kX5glzSMFsAH58=
Subject key identifier:   87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942144285004E2E32038C138FB9DC90C29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 85.208.92.0/22
                          IP: 2a09:84c0::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:28:50:04:e2:e3:20:38:c1:38:fb:9d:c9:0c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:a4:2b:6b:3c:aa:2b:a4:37:9c:d5:8b:ff:
                    ab:9c:3d:cc:a2:5a:1b:1c:25:25:21:f5:29:23:f5:
                    7c:81:ba:f2:38:7d:79:57:72:cf:82:5c:6b:04:5d:
                    d4:60:91:bc:fb:66:94:31:27:07:de:97:c1:c4:c8:
                    b8:03:a8:50:a7:df:35:87:1c:96:9b:b1:d8:88:9d:
                    b7:1f:54:43:f3:11:36:36:fc:14:f4:a8:7b:9b:f1:
                    d4:56:de:77:db:86:bb:39:8f:7c:bf:e8:00:ea:04:
                    bc:f9:4d:5f:fa:0a:81:54:16:9a:22:c4:77:7d:f2:
                    2e:23:77:f0:38:14:0a:26:64:2a:fa:bd:b7:82:81:
                    db:80:7f:f9:eb:cd:68:12:05:0e:3b:b1:94:9a:ac:
                    c1:61:6a:82:84:65:97:53:6a:d0:a0:5a:5f:bd:a8:
                    ac:56:9a:26:4e:df:38:64:6e:ee:18:67:27:e4:4d:
                    2d:f2:f4:0d:48:6a:46:ab:8d:d0:43:02:ab:95:47:
                    ce:fc:46:49:b5:28:cb:01:c3:9d:03:be:6a:11:20:
                    42:22:f1:6d:f1:ce:40:81:3f:9e:da:cf:60:d7:49:
                    01:fe:fe:4c:b6:e0:2c:4f:33:1c:b3:34:b4:53:76:
                    2b:01:a4:a1:22:f8:17:bf:d2:d6:42:41:3b:45:7d:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.92.0/22
                IPv6:
                  2a09:84c0::/30

    Signature Algorithm: sha256WithRSAEncryption
         98:98:57:b4:00:b9:86:31:87:85:c8:4f:45:8a:da:ce:fd:f2:
         f5:a5:1f:11:91:a5:e6:a3:31:a8:97:fd:2e:2b:60:7b:4e:71:
         95:b4:02:f5:c2:28:7e:47:b1:5e:3a:4e:90:ed:86:db:46:53:
         2f:59:ac:2b:6e:11:f4:eb:ae:a0:4a:35:3d:25:11:35:41:f5:
         72:ef:a7:8d:f1:b9:85:ce:ba:7a:f2:b6:4b:20:92:34:ba:41:
         49:59:36:a8:a8:2f:a6:b0:22:16:87:85:1c:86:10:80:4c:22:
         21:9b:01:9c:56:f9:95:02:d2:e8:36:8e:2a:b7:26:36:cd:42:
         52:45:82:ab:02:4a:53:96:51:76:09:70:d2:7d:f4:c2:75:e5:
         4f:c9:5a:59:dd:82:d1:c5:ff:7c:54:17:c2:7a:e7:ff:f3:94:
         3e:96:06:4d:fc:ff:39:54:2d:4c:f5:97:65:90:d8:a9:39:25:
         04:b2:95:05:2c:43:69:9c:de:14:d7:3e:ba:36:23:94:d4:30:
         56:07:04:62:77:45:41:60:69:d2:69:ac:1f:9b:7d:e4:87:d1:
         53:41:67:40:1f:f5:83:36:fd:90:c1:df:c7:5b:36:ae:9b:b1:
         83:0a:6c:13:02:c6:96:3a:02:ac:8e:98:39:1c:28:b0:53:ef:
         41:fb:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----