Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
File:                     QlbgyzjNYSXO4U5Jcii4SQodQOk.cer (raw, json)
Hash identifier:          RnJOVo48ut1O1HFUydn/NB63cXgIVBemmdfuMJTvkGY=
Subject key identifier:   42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942825AED5A80092ACAFFF93B593C365E3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:52:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203778
                          IP: 194.33.76.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:ae:d5:a8:00:92:ac:af:ff:93:b5:93:c3:65:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:52:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:cc:c5:b4:25:fb:e7:e8:d3:14:40:e0:2e:
                    30:83:30:23:45:a7:17:fc:17:1e:4c:72:fb:72:c9:
                    93:28:76:b0:c9:d7:da:b4:91:60:67:27:05:22:c9:
                    2a:0d:2b:2f:9b:19:4f:f2:de:d2:47:f8:f2:50:28:
                    76:3c:f4:f1:62:7e:54:2c:9a:ab:a9:dd:dd:19:a4:
                    00:c8:2f:de:94:3c:67:de:79:07:64:7e:70:26:dc:
                    aa:31:3b:94:91:a7:38:13:32:f4:fd:bf:71:6c:73:
                    ac:72:a7:b9:2f:17:75:5b:e8:4b:97:93:96:9b:db:
                    92:6c:96:08:68:25:ef:0c:b4:58:08:5b:1c:a3:d8:
                    5c:b1:51:72:36:fc:2b:c9:34:a2:0c:a4:34:b0:9f:
                    e5:b6:1f:4f:ba:c6:87:74:30:5d:cc:82:86:f6:78:
                    90:13:de:07:a7:4f:1d:74:78:00:67:ff:0e:cb:34:
                    c4:6d:e4:d4:76:34:ff:71:94:33:55:ba:9b:0d:d3:
                    9f:da:c0:0e:4d:e8:24:b9:89:20:8f:d6:e8:75:5e:
                    71:9f:c3:f9:d2:d7:e0:fd:d0:a3:b5:e1:53:65:c6:
                    b9:f1:51:7c:8e:82:17:39:fb:64:2f:1e:2e:0e:b4:
                    9c:82:db:a3:87:36:e8:9e:74:4d:87:c7:43:01:57:
                    4b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.76.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203778

    Signature Algorithm: sha256WithRSAEncryption
         99:60:2b:ac:63:fd:5c:40:74:44:b4:3b:fb:e7:0d:94:52:1d:
         24:02:08:7f:fd:a3:93:ae:22:b0:f2:0b:cd:8d:1e:c8:8d:6f:
         25:0c:62:9d:a3:6e:33:fe:88:54:86:01:2c:f3:c6:84:0c:09:
         bb:16:15:59:ce:76:00:31:21:65:e1:f3:ab:a3:52:6f:78:e5:
         6c:0a:44:2d:54:31:a4:bb:ed:97:e4:81:06:3c:1c:90:db:eb:
         a9:a9:13:2e:1b:14:19:74:dc:71:9c:b0:91:ff:62:b1:23:a6:
         b0:b9:03:f7:f2:19:a0:d8:c4:83:49:5c:af:95:91:f7:ce:fa:
         48:d5:99:0c:5f:df:0b:87:76:16:5c:f4:5d:b5:39:91:b1:d1:
         79:a8:c4:dc:f9:4a:ac:09:a0:cd:ac:2c:7b:0e:1a:97:a9:80:
         7a:54:0b:97:b9:18:f8:bf:d6:15:fd:d2:5f:33:57:d2:a9:ea:
         2d:ec:73:89:9a:09:ea:91:17:c2:46:0d:14:91:4a:00:7f:ab:
         a7:86:63:ad:f0:47:33:48:fd:46:07:b9:13:73:cf:6a:b1:af:
         51:a3:50:4e:fc:16:e4:e1:06:6d:a0:05:59:10:d6:d3:f7:ac:
         bc:7a:54:82:c7:bd:8c:a7:47:e3:23:e8:d2:86:f8:47:1d:ff:
         82:e7:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----