Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
File:                     vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer (raw, json)
Hash identifier:          GzGyeILLgYtEIVWWKF2wBq0tZVTmXZAy5TCA0FOD37g=
Subject key identifier:   BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B4A3FD411C22A1651F6ED922D221B6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:48:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48417
                          IP: 94.247.32.0/21
                          IP: 185.21.162.0/23
                          IP: 2a02:db8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:a3:fd:41:1c:22:a1:65:1f:6e:d9:22:d2:21:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:48:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:6b:8b:b7:00:23:a6:ec:34:24:35:37:d4:
                    13:29:d5:d5:9a:42:54:b2:f7:46:9e:b8:49:8a:68:
                    de:c1:52:bc:2b:96:22:f3:b7:4c:2d:4e:bd:a1:d6:
                    64:fe:7c:6d:d7:2d:91:cd:8b:ac:32:30:9f:56:6e:
                    49:a6:9b:60:00:d8:3b:a6:91:69:fc:d0:a6:ed:fb:
                    e1:61:b6:31:75:a0:ed:5a:51:6c:ca:6a:2c:7d:36:
                    4b:7f:45:b4:ec:62:e1:21:85:7b:8b:a0:bb:0f:98:
                    6a:89:0c:d1:6c:3e:8a:75:ea:f2:71:43:87:3b:c5:
                    53:e5:e4:86:80:fa:4f:d8:1c:ec:d7:b0:f4:c1:d5:
                    b9:2e:e2:82:1a:df:f7:ee:c4:66:c7:19:39:8c:fc:
                    e2:ca:dd:63:3b:d6:31:bb:10:f5:0a:84:1a:a4:43:
                    b6:c7:85:d2:fb:0b:82:bf:6e:6a:d7:f9:31:70:02:
                    bb:db:9f:cd:fa:e1:80:c3:16:a5:4f:f2:56:f7:b1:
                    10:9c:5d:03:86:44:42:d2:5c:5f:22:58:bc:a8:fb:
                    48:b4:cb:c6:ee:13:4b:7a:79:98:e3:a8:0b:9a:b0:
                    fb:4e:19:c7:e0:95:18:9a:6a:98:dc:69:6f:ee:76:
                    3f:54:72:5e:d8:4c:47:ab:d8:65:cb:90:4d:6d:4c:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.32.0/21
                  185.21.162.0/23
                IPv6:
                  2a02:db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48417

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:84:e6:2c:e3:f0:7a:8f:9c:19:1e:fe:ce:d5:4f:26:8b:
         8f:1e:58:2b:65:59:0b:79:b1:66:14:19:d8:6b:42:fd:f2:ec:
         be:01:17:17:f3:e6:e5:d1:6d:07:cd:6d:93:1e:fb:ad:8d:8c:
         fe:ac:53:22:32:55:c3:fc:7c:13:e2:c8:3e:d5:2c:bd:50:13:
         6b:cd:f6:f8:52:0d:ca:49:81:32:47:f1:56:81:33:74:9e:b1:
         34:b7:c5:ac:f9:12:98:74:22:3e:7b:8f:1e:08:f0:97:25:d0:
         14:d0:18:9d:dd:57:dd:85:f4:49:d7:b8:46:20:51:20:e8:94:
         43:89:d0:6f:7c:bd:48:3d:4b:dd:b3:26:38:0d:ad:71:7c:6b:
         a5:59:1b:dd:85:26:10:d5:e7:9c:9e:0a:55:7d:e0:6d:78:fe:
         c7:6c:14:d2:07:2e:27:a0:09:89:0d:31:96:15:29:01:a7:b8:
         b7:9b:1e:81:6d:cc:73:db:03:f4:33:08:9f:b5:67:97:dc:ed:
         e2:66:b1:02:8e:54:21:50:f6:c6:38:d1:78:27:39:6d:93:7e:
         33:df:2b:67:85:f3:61:ea:25:0a:26:af:49:b0:49:70:9f:f0:
         33:b9:a8:73:4d:b7:6d:0c:9d:1d:3f:5f:62:36:b4:be:83:37:
         04:96:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----