Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w_Qd4f4GNuCEN5sa0uu6ft_PloI.cer
File:                     w_Qd4f4GNuCEN5sa0uu6ft_PloI.cer (raw, json)
Hash identifier:          cAIEMZafZ0zFtRAEho/bt/wYnAIRfp7usl9j+WO5F+c=
Subject key identifier:   C3:F4:1D:E1:FE:06:36:E0:84:37:9B:1A:D2:EB:BA:7E:DF:CF:96:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CF36A9EA3D61283E918FB1EC3EAB7BE28
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/80bf4f-ccfd-4cd0-ad4d-b5eec9bd7705/1/w_Qd4f4GNuCEN5sa0uu6ft_PloI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/80bf4f-ccfd-4cd0-ad4d-b5eec9bd7705/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 10 Jan 2024 12:48:20 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 202684
                          IP: 185.116.112.0/24
                          IP: 2a0e:4940::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:f3:6a:9e:a3:d6:12:83:e9:18:fb:1e:c3:ea:b7:be:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 10 12:48:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c3f41de1fe0636e084379b1ad2ebba7edfcf9682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2a:a4:53:d3:51:07:95:80:99:93:f2:12:44:
                    7a:90:c5:9d:e3:6c:fc:e3:4e:67:7c:3f:fd:c3:57:
                    38:80:29:9c:f3:de:61:43:6b:b7:19:5d:4b:89:07:
                    05:bd:56:6b:d4:f4:c0:8d:4d:ab:67:5d:e8:75:78:
                    50:45:0d:a7:5c:52:1b:c7:f9:01:0f:e0:00:ce:2b:
                    d7:24:bd:7b:af:33:c8:38:d9:b1:61:10:da:d4:db:
                    52:c6:bf:bb:e8:d1:a1:47:eb:c8:fb:7e:f0:1f:63:
                    e1:0c:1d:1e:a6:23:47:32:6b:56:ac:03:f6:14:5a:
                    88:2b:49:9f:dc:2c:bc:b5:b7:f9:72:f0:d8:3e:f4:
                    9d:af:19:25:93:c3:a9:cf:c6:31:38:92:03:7f:da:
                    e4:52:b0:11:40:cb:66:0f:a5:b9:28:b4:96:fc:61:
                    fd:1c:ac:5c:76:6a:1d:f6:90:d7:bb:9c:a6:a4:95:
                    44:0d:a7:64:6e:de:fa:29:89:0c:6b:8f:ba:aa:67:
                    24:e5:31:12:64:25:e5:0d:da:06:50:fe:83:ee:f0:
                    2d:b4:68:d3:7d:46:30:d2:40:43:7b:04:75:39:6d:
                    e5:c3:d3:62:c7:f0:c3:ee:d6:d8:a4:01:9a:23:78:
                    11:9d:c8:52:72:4d:d2:26:e0:2c:4e:f2:62:42:6a:
                    8d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F4:1D:E1:FE:06:36:E0:84:37:9B:1A:D2:EB:BA:7E:DF:CF:96:82
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/80bf4f-ccfd-4cd0-ad4d-b5eec9bd7705/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/80bf4f-ccfd-4cd0-ad4d-b5eec9bd7705/1/w_Qd4f4GNuCEN5sa0uu6ft_PloI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.116.112.0/24
                IPv6:
                  2a0e:4940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202684

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:fb:a1:3b:ee:21:9b:09:51:80:e0:16:c5:d5:e7:4c:fd:
         22:e6:bc:c4:2e:58:b7:d0:a6:30:f4:b9:ad:c3:24:75:db:dc:
         07:0a:3c:e5:bf:6f:bc:fe:da:0d:b3:eb:de:64:17:9a:73:40:
         0e:bf:8c:15:ee:81:2a:ea:bf:81:38:5c:fc:21:06:cb:80:96:
         77:15:b2:62:75:16:69:63:d5:15:d4:ac:82:44:cc:60:4a:bd:
         56:31:f2:b7:c5:a7:b9:65:fb:ce:03:39:d0:c1:f8:cb:72:8f:
         0b:fa:7d:80:40:08:b2:fa:21:6d:70:aa:1f:14:7d:6f:06:7d:
         67:f1:9d:56:a4:42:82:56:84:d3:97:d1:a3:81:a9:18:78:9e:
         4d:62:fb:b5:df:b8:30:09:42:f1:e1:2f:43:c4:ea:9a:bf:d9:
         c0:e2:bd:a5:1a:3d:9d:44:a4:40:4d:71:b2:a1:6d:28:5c:78:
         01:95:a3:0a:17:93:7b:8f:82:65:8a:0d:89:20:80:83:8d:ec:
         90:8d:00:87:93:06:b9:07:bb:53:2d:ce:44:19:21:aa:32:fe:
         cc:e0:19:73:89:16:c9:4b:a7:64:08:a5:76:a1:cc:db:14:77:
         fe:3a:d7:68:b8:6b:72:8d:85:ce:73:34:91:8e:b2:49:ec:15:
         1e:67:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----