Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
File:                     9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer (raw, json)
Hash identifier:          u8GGBrqFWAV7Mom169fEYSqI3ae5Dae+E8CeP+i8NJI=
Subject key identifier:   F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DD818A220694F4151A104E818A962
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.64.140.0/22
                          IP: 2a04:fa80::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:d8:18:a2:20:69:4f:41:51:a1:04:e8:18:a9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:67:6b:cf:30:9a:51:59:eb:9b:9f:5b:e1:
                    fd:1f:11:f6:83:cf:9f:77:f8:7f:84:dd:7a:37:aa:
                    83:d4:18:8c:e2:fb:60:bb:aa:76:cc:13:51:be:c3:
                    8f:ce:5f:b7:18:62:a7:d2:f9:4c:3d:d0:76:dd:48:
                    7e:2f:61:3b:41:bc:ad:5f:bb:de:4b:ad:48:7f:c4:
                    4e:a3:46:8f:e0:aa:92:e1:92:c4:bc:0d:cb:3c:b7:
                    7a:18:f2:0f:67:5a:b8:7c:fb:d0:a5:73:ef:bf:d5:
                    2b:50:72:d1:91:70:20:18:d5:3f:52:7b:81:d3:ed:
                    44:32:ad:9e:52:16:5f:3d:18:32:fd:de:08:8e:45:
                    8e:c5:7c:c6:7c:0f:c5:71:bf:8c:7a:7f:4c:bd:a7:
                    a6:7a:16:24:6c:41:9a:a7:ed:af:4b:5d:d8:73:4c:
                    6c:6d:c0:bf:ca:9c:5f:8a:ee:66:eb:55:72:ca:1a:
                    b1:08:8c:0c:00:90:9c:d8:a0:6d:3b:0c:b5:0d:0a:
                    40:25:aa:14:98:e2:d8:f5:10:d2:93:ad:c6:e1:3b:
                    ec:5b:c5:80:60:11:1e:0a:56:8c:74:2b:a5:13:ea:
                    c9:b9:50:1a:77:0e:1e:91:44:22:62:9d:ea:fe:a6:
                    c2:a9:6b:55:e4:a3:49:14:a6:33:cc:fd:ef:eb:27:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.64.140.0/22
                IPv6:
                  2a04:fa80::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:34:ba:68:52:a2:72:57:20:4d:d7:9f:ba:82:86:e9:42:
         01:61:e9:f2:dc:ca:cd:9d:3e:9a:65:99:19:cf:11:b0:48:1e:
         be:cb:92:64:bf:69:89:c9:fa:d7:ba:52:60:69:22:c1:c2:e9:
         e4:04:a6:c9:7c:e9:19:24:2b:a9:62:3f:5f:76:47:08:86:5a:
         c1:77:56:a4:53:c0:5c:2e:bf:7a:84:08:a5:fe:33:05:8c:d2:
         74:cc:f5:4d:80:64:62:6c:72:2a:1a:ee:54:2e:e3:11:1e:56:
         94:35:a9:dd:b4:e7:6d:19:d0:bb:69:ce:fd:2f:9f:67:d1:90:
         49:1a:62:1e:7b:87:61:57:d3:d1:f7:a7:8a:08:ae:6e:e2:09:
         21:2e:73:de:08:a2:4e:6a:e9:8b:e9:61:bc:ca:c6:40:cc:c6:
         6c:3f:42:1f:aa:75:6d:1b:bc:fc:28:99:be:73:ff:38:22:00:
         0c:9d:1b:73:ec:da:90:e3:0f:c8:c7:7f:13:68:71:ae:2c:85:
         d8:17:75:1a:e9:0d:ba:a4:02:fe:55:4f:4a:8b:ef:c5:a1:59:
         af:de:c0:08:de:f9:b5:07:eb:0f:a7:36:bb:d6:68:80:b4:f9:
         e6:66:d3:a2:4d:e3:3d:40:a4:f5:2d:81:be:1f:b8:ce:40:cf:
         b3:e7:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----