Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
File:                     vLKFmOvl92DrY-BRpVABF12cY_8.cer (raw, json)
Hash identifier:          Z54IjlKOGjzTyNZeY4+4uFQdQab5yvnrj7wMlzfleAE=
Subject key identifier:   BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961F82B5B0B161A17295F818DDB5502557
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Apr 2025 11:43:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 84.22.128.0/22
                          IP: 95.130.132.0/22
                          IP: 185.43.196.0/23
                          IP: 2a04:8a00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1f:82:b5:b0:b1:61:a1:72:95:f8:18:dd:b5:50:25:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 10 11:43:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:2d:d8:af:f8:e5:92:76:06:c6:cc:e2:1e:
                    8f:6b:a2:61:8c:ef:0b:e8:32:b7:c0:6a:18:6b:7c:
                    9c:37:b2:5a:e2:b7:27:b0:30:e3:a9:04:d9:4c:1c:
                    25:fa:c5:d8:02:45:37:70:a9:fa:5a:49:eb:ee:bd:
                    c6:74:a6:9d:ed:a0:38:e8:8e:aa:2a:73:1a:78:8a:
                    d4:6e:6b:b5:85:52:f4:20:e0:0a:07:9f:dc:73:8a:
                    09:f6:a0:8f:f4:56:56:2d:43:f2:cf:1f:cd:df:ac:
                    0c:0e:46:54:7e:9c:33:08:ee:91:49:4e:f2:41:3c:
                    2f:11:4a:90:6f:70:4f:e2:41:a9:3e:f3:cb:37:f9:
                    e8:b8:e6:3b:aa:26:8a:7f:20:24:c4:cc:60:1a:10:
                    1b:a9:84:98:31:e0:6c:2f:41:43:41:ae:47:e4:57:
                    2b:1e:2d:19:ce:b2:21:de:fa:69:22:d5:0c:d2:e0:
                    b6:98:3a:94:8e:36:c0:d3:d3:55:f2:48:92:d4:e1:
                    fb:d7:0b:ba:8e:1f:53:ad:fa:0d:fa:6a:e2:1c:91:
                    86:03:14:5f:c2:02:48:d2:56:e3:1f:37:7e:45:f6:
                    a2:f6:06:0e:3b:cf:78:f0:79:64:43:b1:86:40:2e:
                    63:61:96:16:01:22:30:1d:fe:0e:f8:fb:00:24:6a:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.22.128.0/22
                  95.130.132.0/22
                  185.43.196.0/23
                IPv6:
                  2a04:8a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:7c:f9:c8:1e:b6:24:56:fb:2d:43:d5:76:c6:86:8e:74:
         4b:c9:00:0b:6d:04:d7:4e:6a:5e:fc:b7:23:61:37:97:8c:0b:
         da:96:4e:a1:00:75:d5:83:d9:7c:22:68:ef:ee:35:d9:b5:d8:
         86:42:d3:39:52:30:88:75:db:a8:90:24:98:7d:a0:4a:6a:3d:
         f4:2f:04:e5:21:fa:a8:ec:2f:24:56:10:36:59:9a:3f:f4:d7:
         52:94:88:96:01:be:e8:c7:64:4f:69:9b:56:9f:96:68:54:9a:
         41:67:c2:6b:92:de:e2:40:2a:e1:0a:17:d8:fc:ef:15:54:07:
         1b:e8:40:5f:27:62:63:70:78:c0:5e:d6:43:a4:46:3b:87:12:
         46:21:d1:d5:42:6b:3d:4b:fe:93:20:78:ce:a2:a8:a4:d1:c4:
         6b:9c:37:8d:85:8f:a6:30:56:5a:c2:45:e6:02:5e:20:31:61:
         9e:5f:a4:1c:f2:a5:82:81:e2:04:73:ed:f7:4f:bc:d3:7b:8b:
         d7:6f:75:90:1c:ef:05:ff:0c:51:da:e2:83:93:46:38:de:33:
         f6:1f:e2:8b:78:a9:b2:f0:64:69:a7:bf:70:ea:fe:04:47:ca:
         d9:ca:ce:d7:a3:db:b1:3f:86:4f:47:fa:69:49:f5:25:a1:28:
         f6:75:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----