Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
File:                     seUmQF1FF0JHmU_u2y1-XdQHk90.cer (raw, json)
Hash identifier:          WiqS7tfb558gbBQ5jBKnAyy971xpdvoxqpxtr46gvfs=
Subject key identifier:   B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424451CB177ABE8785EBA4CD332AA34C2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208574
                          IP: 147.78.40.0/22
                          IP: 2a09:1cc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:1c:b1:77:ab:e8:78:5e:ba:4c:d3:32:aa:34:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b1e526405d45174247994feedb2d7e5dd40793dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:c1:69:8d:96:96:1e:a0:25:45:49:43:b1:
                    5e:f5:38:04:4e:44:e7:af:f6:03:33:97:aa:a1:e1:
                    26:fd:27:a2:02:ff:2a:67:b1:b9:50:06:f2:12:37:
                    b3:97:8c:47:a3:18:d6:e7:59:4f:81:49:b8:d2:14:
                    db:3b:17:d8:58:39:4d:50:6f:af:5b:fd:8e:1d:e7:
                    ac:82:08:7d:d3:67:56:e8:88:7b:43:25:ac:4e:d1:
                    74:a0:d3:2d:b9:46:aa:ec:12:d7:21:62:09:73:f6:
                    ae:11:36:22:3d:8a:6a:7d:9c:5f:c0:86:a7:c2:2b:
                    f2:20:16:ff:54:7d:42:68:00:fc:cd:40:45:b5:c8:
                    d3:ba:c2:27:45:11:7f:e1:e6:84:e1:9f:a3:33:92:
                    c5:6d:0c:e1:04:68:5a:d9:64:91:aa:cb:39:a5:1f:
                    fa:c0:9f:00:46:fe:1f:ad:47:01:a2:06:5c:67:d5:
                    ea:26:15:40:92:63:9d:55:fe:2a:63:18:c8:1c:38:
                    6c:7b:59:9f:51:6a:b5:8e:10:b3:a6:df:e6:aa:13:
                    70:9d:8b:d8:2b:8e:a6:aa:9f:e2:62:3d:51:da:41:
                    cb:2b:13:bd:72:65:cd:a5:79:74:b5:e6:33:84:4a:
                    96:7f:7f:f6:5d:d2:97:3d:fb:6b:3e:a9:2c:6a:cd:
                    7e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.40.0/22
                IPv6:
                  2a09:1cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208574

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:7e:a4:e6:88:9b:00:91:00:e9:cf:4e:60:61:a6:fc:a3:
         f5:ec:5a:1a:e1:5d:84:66:3f:6a:82:93:9e:df:44:ba:c1:85:
         f0:12:76:88:2a:9d:ec:c3:37:84:12:29:8b:d8:4f:1c:0d:60:
         f6:80:fe:10:e3:62:79:f1:a9:c0:9e:d4:1e:e3:16:85:b0:95:
         f3:73:29:8a:00:f8:cd:21:e3:75:dc:03:aa:39:07:9c:8b:ef:
         4d:84:e4:8a:d5:a2:7e:63:28:d7:62:85:24:fa:37:23:15:07:
         04:0e:eb:ea:f2:60:b6:fc:97:16:c3:06:6c:64:d3:71:bd:50:
         ee:03:15:29:b5:f1:27:1f:32:ea:53:4e:47:6a:e8:32:70:de:
         c1:7e:af:0f:d4:d4:97:39:13:d7:81:b9:e2:f0:6d:38:86:9c:
         b8:cb:88:9b:35:e0:a1:3e:30:02:06:4e:0a:3f:77:b5:8c:d3:
         d9:70:12:cb:b0:b6:88:2f:95:9c:94:42:d0:f5:b9:f8:70:ee:
         98:bf:d5:1b:45:00:54:3b:65:ad:16:4b:fb:fc:f6:e5:39:3a:
         93:0b:3b:37:ea:ea:8e:c2:2f:cb:21:4b:52:fa:8b:fa:d4:e3:
         b5:06:c1:13:5d:49:77:44:f3:15:da:12:61:14:75:c5:2b:d8:
         86:99:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----