Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
File:                     q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer (raw, json)
Hash identifier:          DtCS3goXGadIp6/0kWTs/3c+A/3xvM4LZR+NY3XfjRI=
Subject key identifier:   AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E27F889063D7B06BB0FD439A38549
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209182
                          IP: 2.58.184.0/22
                          IP: 2a09:e8c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:27:f8:89:06:3d:7b:06:bb:0f:d4:39:a3:85:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:70:26:49:de:59:b2:ab:f0:76:03:da:25:
                    d3:da:85:30:ed:f0:2b:69:ad:74:37:da:bc:87:a0:
                    83:a7:f9:4a:0d:42:af:d1:eb:34:e9:0d:56:65:c7:
                    a9:25:9b:22:f6:65:9a:54:06:32:b5:41:0e:41:69:
                    c3:06:96:05:f7:9a:de:63:73:28:61:6a:5d:44:b9:
                    ae:67:37:87:7a:51:40:80:27:11:36:06:ef:2b:07:
                    0a:4e:28:43:04:0d:0f:94:47:c4:8b:e8:4c:df:04:
                    ee:54:a7:02:12:50:86:da:6d:b6:42:c9:47:5b:89:
                    cd:bc:08:ff:ad:f4:62:60:8f:b6:3b:c1:94:97:0a:
                    c8:b7:06:79:22:46:d2:ee:5d:97:5a:2b:c6:c6:ad:
                    11:67:70:fb:0b:75:e9:9e:f6:ac:ec:31:a1:b7:e2:
                    c6:0c:02:13:4a:07:ac:4c:a9:87:0f:d8:9a:61:0a:
                    63:7a:73:b0:37:6f:cf:08:88:25:b5:fb:6f:ad:13:
                    a9:aa:83:d7:da:ad:01:e7:c9:99:34:28:2f:3c:10:
                    f9:d0:b8:47:3e:90:5e:29:1c:10:d6:dd:ef:a1:83:
                    69:60:9b:0e:0f:6e:27:fd:ea:1c:1b:a5:b0:52:75:
                    a0:79:dc:47:52:73:20:67:85:13:63:7c:0e:dc:8b:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.184.0/22
                IPv6:
                  2a09:e8c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209182

    Signature Algorithm: sha256WithRSAEncryption
         49:7b:93:41:d3:fc:3b:eb:5e:58:ae:50:d4:c6:40:0b:5d:8c:
         2d:01:26:e3:f4:cc:41:ff:1b:a2:f4:cb:f8:ea:78:4d:7e:a4:
         7e:7b:63:d9:b7:aa:c0:a9:7d:32:8c:eb:ea:0f:27:4b:d8:35:
         37:70:ea:9b:75:19:14:a0:0a:fd:bc:94:dd:ed:72:a8:43:64:
         9a:b9:b0:a9:c1:fb:0b:4a:b5:fa:75:2e:8f:66:2c:72:10:74:
         dc:98:11:98:c0:63:7e:00:dc:95:ff:03:73:f8:ce:ac:4b:77:
         98:2a:e5:20:1e:12:4e:c6:b0:ad:d2:67:ec:d6:e7:a6:11:e7:
         a6:ef:33:f9:81:a8:a6:50:a3:ac:a4:9a:e3:ef:db:c6:da:cc:
         ed:40:7a:a9:bf:5d:f2:ea:de:cf:df:a6:5f:61:23:d1:31:c4:
         39:ac:31:04:43:69:d9:af:e6:90:9a:48:98:46:43:9c:83:0f:
         0c:fd:80:31:58:74:7e:3b:af:e1:51:e5:6b:03:6b:d8:51:61:
         23:3b:8b:97:24:b5:2c:9d:db:2a:48:a9:58:da:7f:09:19:9f:
         04:2a:0f:57:1c:8b:1f:0f:e0:55:1f:2b:08:32:e6:48:b2:28:
         37:28:77:73:ad:2a:8f:46:f7:56:35:01:ce:fc:f7:d7:d9:85:
         f7:54:f9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----