Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
File:                     sEsc31Bs5emTfnf4Jj7PbdslWwU.cer (raw, json)
Hash identifier:          1WbPeZr5KDTuW1zTcQm6poFbSgEcrejzivgqIv4xGfs=
Subject key identifier:   B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942368C4713494A10D2BC4B7770328CDCF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 5.183.72.0/22
                          IP: 2a0b:ba80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:c4:71:34:94:a1:0d:2b:c4:b7:77:03:28:cd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:e1:6f:c0:81:2f:5e:ad:94:bf:3a:1d:d5:
                    fb:3d:40:87:87:5b:5b:bc:e3:18:06:87:18:03:2a:
                    0c:59:9e:2d:a5:1e:be:9d:29:c9:6b:61:f9:64:17:
                    bd:19:76:ea:ca:2f:1e:2b:71:9f:d7:48:37:ba:46:
                    5f:e7:44:03:40:c2:3b:1c:52:da:78:b7:1e:39:4a:
                    ac:ea:f0:4d:cb:49:1e:79:b2:f3:76:6b:31:26:1e:
                    7e:2d:73:cd:3a:fd:a3:d5:aa:c3:26:57:60:0a:b5:
                    fd:04:58:ac:ff:3f:a3:5f:cb:34:56:04:02:90:5a:
                    f2:c5:a0:00:d9:d3:a4:ca:d7:1c:39:d2:cc:bf:fd:
                    34:13:6a:77:d4:1c:93:28:61:d6:fb:ba:41:a5:e5:
                    86:d7:ff:6c:34:bb:2e:e1:dc:53:11:58:70:96:56:
                    4f:a6:37:d9:7b:f4:32:69:60:93:4a:e4:ed:a3:12:
                    b3:4d:f1:57:55:3d:08:69:8f:c3:0e:b3:80:1d:9a:
                    30:f9:4f:f4:a6:79:2a:c6:7f:80:c2:61:40:b2:8a:
                    4d:93:d2:bd:31:c4:76:22:f6:41:62:41:c9:89:0d:
                    5a:90:cd:d5:66:7f:0b:c2:41:1d:4c:7b:a2:46:40:
                    4e:b4:d1:72:35:65:42:20:74:e8:64:a6:ff:75:5d:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.72.0/22
                IPv6:
                  2a0b:ba80::/29

    Signature Algorithm: sha256WithRSAEncryption
         98:22:e2:86:6b:35:e3:c6:2a:9d:69:d9:61:58:45:f2:c8:4c:
         01:59:50:39:b7:47:76:4a:8f:65:20:eb:e2:57:79:97:70:af:
         dd:c8:fc:e0:65:b5:e3:6b:4e:2e:91:ac:1c:b8:80:30:cf:b1:
         d0:ce:0b:7f:fd:20:e1:b4:ca:14:ef:db:c9:b8:08:17:31:be:
         7d:8a:f7:ff:1e:2d:85:4d:05:42:51:05:e0:79:e8:dc:72:b7:
         b5:b5:8f:50:04:79:b3:60:55:9e:7d:b6:52:de:38:56:e8:c5:
         65:9f:f5:ee:18:4c:24:71:d8:b3:ee:87:cb:13:c1:ae:51:03:
         dd:92:9c:0b:79:46:72:df:61:04:f7:cb:45:a3:54:e6:45:5a:
         99:82:42:d9:06:44:58:ca:b1:7b:dc:76:1c:d1:ad:db:1f:bc:
         f6:73:77:e2:b4:fa:71:fb:9c:ee:92:71:41:6e:7e:d6:a4:c0:
         51:02:e2:82:bb:ba:83:fa:48:56:68:4e:37:1d:fa:93:e0:70:
         f3:29:78:50:97:f4:6f:44:bf:eb:75:22:5b:3b:75:01:9e:86:
         71:4d:4c:46:36:78:27:3d:b8:f8:50:e4:ca:f4:95:4d:fb:cb:
         56:00:73:e1:f0:a5:fa:ba:d6:c4:49:c7:ee:eb:c7:bb:08:37:
         7b:a8:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----