Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer (raw, json)
Hash identifier:          8BaJuUUPz/xvvEpCugqRppeg9IVtemKcA3XlL6dBaKY=
Subject key identifier:   93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B35C26956983F68F9AA048D5D7F560
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207439
                          IP: 91.234.47.0/24
                          IP: 2001:67c:29bc::/48
                          IP: 2a0c:800::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:5c:26:95:69:83:f6:8f:9a:a0:48:d5:d7:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ea:e8:1f:ab:33:0f:70:66:03:f0:72:f6:f9:
                    61:cd:45:1f:c0:3d:a9:11:7d:7c:4d:af:d1:07:58:
                    5a:77:dc:30:f7:5b:50:fc:97:63:a9:65:81:e4:d8:
                    2b:28:20:37:64:48:e5:0d:7f:04:26:e0:ce:0e:13:
                    66:8d:2d:66:62:df:6d:c0:36:0d:56:11:b2:91:5e:
                    5e:25:79:2e:6c:9d:7f:ea:5b:8f:34:86:65:a0:b9:
                    f5:da:ed:8c:d5:6b:ed:67:89:25:40:b1:20:8d:ba:
                    ad:16:59:0e:07:3c:52:2e:8a:cb:3b:36:19:19:58:
                    bc:4a:42:7f:66:a9:a2:a6:21:ca:44:c3:d9:3e:ec:
                    30:1d:87:e8:a9:7b:0b:17:d3:2c:52:55:ab:52:bb:
                    04:c1:0d:da:0f:f9:a2:e9:a8:04:a7:d6:ec:41:8a:
                    f6:28:ed:5b:f3:b3:70:1d:ac:86:74:5c:90:3b:4b:
                    d7:7e:51:b6:d0:7c:89:a7:e8:0d:2b:7b:29:28:3f:
                    68:d3:f4:f2:30:69:0f:63:5e:78:67:f3:eb:10:ba:
                    49:45:07:43:f8:0d:9f:e4:0d:d2:fb:09:de:1b:b6:
                    90:4e:41:cb:97:73:1b:3c:ae:c9:cf:a8:5d:e6:da:
                    a5:4e:fd:11:0c:f3:d5:65:c8:50:8b:86:66:86:14:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.47.0/24
                IPv6:
                  2001:67c:29bc::/48
                  2a0c:800::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207439

    Signature Algorithm: sha256WithRSAEncryption
         a8:ab:1b:32:d3:94:7a:af:2c:42:4e:7d:37:06:25:06:21:56:
         06:dd:10:a0:bb:04:ae:f9:34:fc:f5:4c:8e:6e:38:1e:0d:d6:
         9f:5e:67:17:a9:9a:42:57:f7:de:d9:fb:12:42:aa:3e:25:eb:
         f3:bb:a3:a8:fe:fb:5f:34:67:fe:5e:8b:38:b5:cc:b3:0a:e6:
         75:7c:e3:8e:a6:0b:62:10:76:da:05:78:78:40:21:03:b0:2c:
         f3:55:7f:dd:09:95:20:82:8f:ae:fe:cc:49:f2:49:5a:f6:ed:
         5a:3b:98:88:2b:f6:03:f1:07:6c:95:35:a5:44:0e:65:6c:a4:
         4c:47:64:08:b1:ee:35:0d:f8:b2:91:c0:04:55:13:7e:9f:ea:
         e9:9d:98:0c:16:7a:24:45:ee:5d:39:b8:f5:82:3e:ec:59:8a:
         b0:5a:4e:a1:dd:5b:44:e9:ca:3c:aa:0c:9c:2e:f4:43:13:f2:
         12:64:44:e7:a8:21:60:a2:f7:dc:44:ca:1f:c7:78:ef:20:37:
         75:64:6e:f1:0b:a7:c9:06:fb:f4:50:2c:e4:80:01:53:c9:18:
         46:71:c2:c7:e4:0e:17:aa:6b:24:69:21:0d:f7:64:da:89:76:
         fe:14:92:db:c5:a4:4d:4e:ec:43:69:21:60:8d:05:dc:97:e5:
         c4:90:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----