Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
File:                     sDQCUfGCY0f06WRfaCTTuT9H5d4.cer (raw, json)
Hash identifier:          mssqZUO6fioS6YKlQF+uzYS+CIV+TOmkVRSVbR/vv+E=
Subject key identifier:   B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FE10CC3E812635D445023D3B0754A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203930
                          IP: 89.207.152.0/24
                          IP: 2a13:5b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:e1:0c:c3:e8:12:63:5d:44:50:23:d3:b0:75:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:f4:5a:ff:01:77:52:af:d9:6d:5d:54:c2:
                    86:b4:d3:d1:f9:72:cf:7d:a4:60:60:9b:71:b6:0c:
                    42:c4:75:8b:23:52:95:9c:ea:d8:e2:30:9f:7a:34:
                    f5:a7:33:97:d5:78:87:a2:9d:e8:00:d0:60:ba:53:
                    3b:8d:86:e2:2f:ad:4c:4e:0f:79:bf:cf:60:31:be:
                    d6:03:e3:b7:96:56:93:17:bd:80:bb:5a:2d:18:f5:
                    ca:57:dd:29:88:39:cc:a0:ff:4a:ff:33:e7:5e:ea:
                    85:a9:c8:b1:9f:34:e9:d1:9a:8a:92:bd:1a:f3:72:
                    1f:c4:05:4a:fc:92:25:5b:db:ef:85:17:77:25:ff:
                    a2:0e:2d:c8:13:17:03:16:b6:34:75:e4:dc:48:ff:
                    01:3d:bf:21:f4:66:d1:0c:dc:dd:ba:fc:9b:e5:65:
                    c4:74:18:36:6c:d8:cc:89:91:72:53:b1:45:a7:d9:
                    9a:52:6f:dc:0e:84:32:4a:6e:7b:03:99:15:26:fb:
                    08:92:ae:aa:98:1e:34:c7:2f:ec:67:8a:92:57:6e:
                    18:d9:22:bd:11:fb:84:4a:fd:ee:34:7c:92:b3:ba:
                    94:26:74:ab:4e:d8:4e:b2:b6:71:43:2b:ff:67:36:
                    d9:5b:91:f9:76:99:67:35:7d:14:11:24:ff:eb:e1:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.152.0/24
                IPv6:
                  2a13:5b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203930

    Signature Algorithm: sha256WithRSAEncryption
         93:1b:b1:8b:4f:7d:7c:f8:1d:ee:8e:16:88:9e:c1:b6:79:8d:
         94:20:ec:c6:4a:82:b6:e5:94:88:7b:e5:3d:7e:5c:e5:42:ad:
         4a:21:c2:8b:a3:b7:2e:5a:80:0b:4d:8a:e0:5d:5a:27:dc:be:
         3f:28:be:08:78:69:2a:22:83:e4:f3:9c:52:41:66:0a:20:41:
         35:73:42:43:53:eb:1a:c0:90:86:9c:9d:55:49:6f:c6:99:13:
         50:2f:41:6a:88:55:b3:fd:19:81:14:dd:c9:49:a0:c5:b2:4c:
         71:ba:1f:e9:2a:ce:61:83:48:58:15:b1:7f:17:34:c2:39:a7:
         d9:fb:60:ee:3b:a4:e4:a8:61:a1:44:1b:c8:8a:60:b7:07:0d:
         47:ec:aa:e3:35:db:4c:3d:1c:16:4a:5b:f9:7b:0e:87:69:65:
         40:f5:3c:96:07:17:e2:95:43:88:fa:5a:be:ad:da:27:90:28:
         51:57:6b:1e:84:49:ec:9e:e6:57:6a:7a:04:93:20:f9:ea:f8:
         2d:6d:c3:b7:40:a6:cc:8e:cd:34:2f:24:57:c5:48:4e:52:8e:
         08:d6:9f:3b:4f:75:fc:69:fa:d1:c4:77:b3:51:30:6c:92:1b:
         c4:9f:72:60:7d:1a:05:8f:40:ab:48:d8:6b:9d:92:2c:0f:e2:
         cb:d3:ac:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----