Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer
File:                     vNgzeodIrlhibqk9my9YmNAY3fE.cer (raw, json)
Hash identifier:          KgjdSOhDy6GQlVaHJCEH5z5dZhoUNw0n6QKKf5G3tr8=
Subject key identifier:   BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDB9723B568DDE7807324F86CF1825
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.16.64.0/21
                          IP: 193.16.80.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:b9:72:3b:56:8d:de:78:07:32:4f:86:cf:18:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bcd8337a8748ae58626ea93d9b2f5898d018ddf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:7c:f0:a3:b6:70:bb:d5:d1:45:6e:07:ec:
                    a4:03:d0:6c:30:f4:0e:11:5b:2e:51:1a:c9:f4:ba:
                    3e:b9:1d:e3:1f:a9:e8:da:40:30:6d:ea:93:1e:38:
                    a7:34:4d:67:94:42:65:ff:4f:20:f4:e3:e2:f5:b1:
                    5a:33:f0:94:ce:1d:da:32:25:d8:43:06:97:e5:c9:
                    97:2e:b9:7b:b9:4a:49:b3:b0:9f:bc:24:8d:98:c6:
                    7f:b4:5a:07:1c:da:68:8e:96:ec:cd:e9:20:dc:e6:
                    a3:89:8b:3e:14:51:77:56:1a:df:5a:04:e8:3a:4a:
                    ad:71:54:15:0a:a2:67:6d:b3:df:38:c9:9c:19:24:
                    28:4f:a6:67:f1:0c:b9:8f:a7:f8:98:dd:de:e2:6c:
                    00:f9:8f:60:a9:24:c6:22:dd:2a:90:2a:c6:7e:79:
                    a7:ab:d7:f8:9e:13:c6:83:3c:ba:83:2e:e9:97:2f:
                    23:9e:e5:8e:f1:0f:c1:c3:40:4f:32:93:c5:29:e0:
                    4f:9d:dc:78:4a:e1:7a:1a:78:08:8b:6f:78:e7:a6:
                    c8:8b:90:48:92:a2:12:df:01:4e:b4:a0:d9:66:72:
                    57:cb:72:8b:a5:1e:89:73:3a:c9:8f:f6:bf:b5:72:
                    dc:e9:f3:37:9f:d3:3a:49:95:af:5d:00:f8:ab:01:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.16.64.0/21
                  193.16.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:02:4e:f4:13:4c:a2:95:c3:70:74:7e:ce:1a:2f:51:c6:1a:
         5c:de:ae:d9:58:cf:b0:ce:8a:85:a5:77:11:49:a0:cf:56:7b:
         f6:97:d9:2b:0e:96:29:40:8b:3d:16:c7:7a:03:a6:74:9d:85:
         5e:2e:78:f4:25:df:92:42:50:20:dd:00:cd:33:29:ab:d4:e5:
         dd:5b:50:c0:59:f9:ca:54:ee:51:a9:a7:46:b6:c2:61:6f:d3:
         9b:fb:6e:e8:3b:23:2d:58:c8:9f:c6:b6:81:1c:56:95:f6:19:
         b7:37:f7:41:29:ef:53:12:07:6b:ee:00:a3:8d:ec:04:50:4b:
         31:06:20:82:41:88:88:0a:3c:6e:88:86:52:b9:ba:8b:90:31:
         87:d2:c3:3b:bc:dc:5f:04:80:4a:3e:e1:8a:f4:ff:bd:89:26:
         9a:e1:af:22:5b:5e:a0:49:1d:d4:10:f8:c1:6e:42:3d:2f:da:
         ef:74:d1:ba:e6:81:78:fa:c7:16:0f:2e:54:65:89:a3:3c:0c:
         28:8a:1e:03:da:a5:b2:b3:66:9d:72:8d:35:27:c8:b3:5f:a6:
         a5:f7:54:b0:87:a8:e7:95:2a:94:1c:78:19:b8:41:9e:8c:94:
         0a:91:c2:9e:fd:e4:c8:28:23:11:89:e5:3a:98:09:90:af:74:
         93:74:16:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----