Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
File:                     rdbXV2zSgkXGefmvNXXANbiiLJ4.cer (raw, json)
Hash identifier:          wjcLii4NqurW3D2fGQVaTsYxwXcwsWX8nQjRebpUkMA=
Subject key identifier:   AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195472B43E2E07A79BBE2353BDF14580181
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Feb 2025 11:29:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.9.220.0/22
                          IP: 2a0e:1500::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:2b:43:e2:e0:7a:79:bb:e2:35:3b:df:14:58:01:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 11:29:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:d7:5b:41:4d:9b:7f:17:d0:4b:64:5b:c1:
                    f1:02:19:7f:c8:de:dc:3d:37:14:38:fc:1b:08:d2:
                    22:87:b7:1b:9a:2b:62:9a:97:ad:1d:c2:f3:7e:b3:
                    93:45:b2:a2:30:3f:e0:22:b7:3a:e6:3f:c8:ca:8c:
                    28:7d:ec:66:fa:ec:aa:8e:9e:fa:aa:7e:56:2b:1a:
                    1c:7e:25:8b:ae:d4:33:bc:40:dd:fa:e2:0d:f4:38:
                    11:7e:bb:a3:c6:35:9a:8a:1b:07:dd:8e:4f:38:57:
                    b4:fd:9e:62:02:bb:c1:4c:97:ac:a9:31:71:8e:3e:
                    b1:d6:fe:8c:51:74:fc:34:65:8b:59:e6:09:c6:0f:
                    1e:e6:8d:68:59:e0:5f:25:3c:95:de:b6:2e:1a:8f:
                    5b:13:9b:c9:4f:5c:86:ec:27:6d:bf:6e:4f:03:43:
                    70:94:74:8b:f7:36:1e:0d:51:16:b1:e7:c8:4f:00:
                    83:34:52:ff:fc:c9:60:e2:0e:5a:a4:bf:d3:60:ea:
                    f6:c9:3c:28:61:5d:ba:9e:21:1b:d4:75:c6:4e:93:
                    30:b7:75:4c:df:94:b4:64:3a:b5:38:f5:09:f5:85:
                    d0:2f:40:a2:f2:ac:09:c3:bf:c2:62:1d:52:09:bd:
                    70:10:97:26:42:07:f6:06:05:af:e0:11:d3:60:cc:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.220.0/22
                IPv6:
                  2a0e:1500::/29

    Signature Algorithm: sha256WithRSAEncryption
         34:73:86:39:c7:03:7c:7c:9b:79:d2:9b:ba:79:bb:89:cd:0a:
         15:7a:5a:46:1c:d0:9e:78:2b:a2:7c:79:0b:75:40:bf:08:69:
         b9:8b:da:53:25:66:66:1c:a8:a6:96:85:47:27:69:5e:a7:b3:
         e5:79:ca:6a:e6:c5:d7:52:d4:73:45:ef:54:a6:de:f6:de:b2:
         df:2a:19:f3:f4:81:fb:d1:82:68:fb:a5:49:29:af:ba:1f:b1:
         d1:b3:a6:75:13:24:5e:07:cd:41:f8:f1:92:15:4c:dd:76:51:
         b8:e9:29:b3:d0:82:fe:df:e1:c4:56:74:20:3b:77:59:3f:cc:
         53:fd:c7:54:45:3a:5d:e6:c9:35:0f:ca:aa:6e:bf:46:a9:64:
         a2:9e:08:5f:67:0c:97:71:94:6e:01:ff:6f:63:51:1d:dd:4d:
         a3:fc:d6:9f:cc:97:38:20:c1:15:a3:8f:67:f5:1c:f7:f8:f6:
         9c:f2:c5:14:e1:84:83:80:7b:77:a9:a1:79:43:3f:c3:44:23:
         8f:24:aa:5c:e5:1c:2f:96:06:5e:10:18:68:e3:42:a2:db:0d:
         23:ca:5c:73:e5:ba:ae:55:9d:9a:27:65:31:6f:dc:e4:63:39:
         f0:7f:09:2b:e8:5c:5d:eb:d5:9b:8e:b7:08:c0:69:12:19:e0:
         74:43:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----