Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
File:                     hWklE5rMSv4L6e8JhOPnvVtE6eY.cer (raw, json)
Hash identifier:          beHnt80IHflhwzihJfh/yUWOudzmEuNf3g/9tjg2J7Q=
Subject key identifier:   85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D953A2C31016006746A8484B1ED88A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207290
                          IP: 37.44.240.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:53:a2:c3:10:16:00:67:46:a8:48:4b:1e:d8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:20:6d:77:88:e2:c4:f2:dc:8f:15:c0:aa:42:
                    6f:bc:cd:9d:d3:3c:e1:62:50:83:d6:61:e0:72:ef:
                    0f:c2:91:fd:68:25:43:1d:ec:17:61:ee:08:97:f4:
                    ee:45:2f:01:61:39:0e:f6:bf:e4:95:ad:7b:5f:67:
                    45:26:f2:3e:53:03:db:fc:40:11:bf:07:62:45:a9:
                    bb:43:f4:bd:bc:3d:d9:72:d0:fa:42:23:18:a1:61:
                    4a:84:18:fc:9e:2e:c2:7d:59:10:75:99:a3:af:10:
                    e4:d8:50:71:e5:5d:e9:04:77:73:33:ee:5c:6d:f0:
                    a6:33:36:53:cf:ff:79:6e:70:dd:c6:2b:b5:f5:9c:
                    59:23:36:ff:32:ed:c3:5e:3a:d7:4d:d9:08:56:f7:
                    2d:ad:d7:ef:8e:aa:96:0d:3d:22:61:bc:b7:a4:03:
                    bf:6c:94:82:3a:b2:20:9f:6b:5e:ae:e4:9d:d8:68:
                    13:a5:a3:9f:b3:45:08:3e:21:22:5d:a3:e4:70:74:
                    a6:54:2e:e2:3f:15:b1:c1:53:d7:c2:fe:ea:e1:74:
                    83:4b:3a:c9:5f:18:3d:6b:fa:1d:b4:f7:42:4e:7d:
                    cb:11:12:66:f2:a8:24:ac:b5:7d:1e:83:7b:ac:31:
                    6b:3c:94:62:c3:74:91:ef:5d:4d:b4:cd:63:1c:f7:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.44.240.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207290

    Signature Algorithm: sha256WithRSAEncryption
         01:74:00:ab:f3:c9:68:af:27:e1:ef:fe:1f:c9:bb:67:93:ec:
         f2:c4:c4:79:c7:fc:5b:70:b4:ee:09:f1:ec:06:10:e6:26:21:
         7b:b6:3f:8a:02:f4:8d:70:5f:13:55:c4:77:d9:b0:d3:f5:4b:
         ce:ad:68:46:11:03:07:58:d6:05:4c:d4:81:21:a6:da:a6:49:
         d5:b1:b3:67:82:6d:3e:c8:e3:d7:60:cf:bd:d0:07:57:01:5d:
         1b:7f:d1:fc:73:a4:19:6a:9a:26:b5:7b:da:71:85:5c:4d:b7:
         0f:e5:2a:40:e2:63:c8:01:95:8f:8f:0a:17:51:0c:6a:fe:c9:
         60:95:09:3e:4b:7c:11:fd:9f:ab:e0:1e:f0:e6:f7:b9:c1:82:
         3a:e5:06:1b:3a:58:56:7a:80:b3:a9:8b:29:52:19:49:1d:3e:
         11:dc:91:9b:e8:46:bc:a1:20:4b:12:0b:6d:38:a4:cd:36:bf:
         c1:96:89:35:7f:d8:c2:04:c6:f9:e3:11:60:24:c8:4c:9f:60:
         5c:74:b0:fb:70:a0:12:72:77:a3:1d:1c:6e:d8:c9:e6:69:9a:
         4f:3e:7a:76:d3:27:8a:93:dd:1b:10:20:0b:e7:6f:f0:87:d2:
         14:3b:bb:9e:1e:d3:5e:65:d9:69:9f:4f:84:75:36:bc:f5:91:
         bf:be:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----