Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
File:                     1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer (raw, json)
Hash identifier:          QvfrDbjBx41ucFUlTp6PRRI5th8wKQ94f1UldzQgq40=
Subject key identifier:   D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942068646473CDBABAF76B843B24C91C79
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210645

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:64:64:73:cd:ba:ba:f7:6b:84:3b:24:c9:1c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:e5:97:e4:5f:ed:86:32:ab:73:0f:0e:55:
                    89:73:8b:15:28:6c:cf:09:3b:50:22:1b:1b:84:39:
                    39:3f:e2:e3:86:c7:20:b4:06:9d:cc:01:f2:88:57:
                    de:85:c2:06:bb:92:f0:c6:f5:dd:0f:41:7b:f2:aa:
                    7b:b0:a5:d5:6f:07:3a:71:77:e2:b6:17:bd:19:3b:
                    79:69:44:df:79:13:07:da:a8:f4:d9:67:09:38:de:
                    64:1b:6a:e4:0b:4f:8b:41:a3:44:6f:5b:9a:3e:a3:
                    29:be:22:0f:96:8c:5c:93:23:07:ca:41:22:a4:01:
                    0d:09:55:20:3c:5c:d1:4a:6b:19:c4:a1:18:d2:a3:
                    5d:22:b6:e7:b0:16:f0:78:14:a0:08:07:6e:b3:35:
                    dc:6e:91:3a:fb:5b:76:b5:f4:8c:a2:a6:e9:ed:50:
                    9a:ae:68:0a:c5:be:f7:d4:b3:c5:a7:bf:d3:31:30:
                    34:6a:11:7f:93:83:a8:9c:fc:bf:b4:a3:1f:93:ad:
                    e9:6f:48:dc:1d:5b:dd:b1:be:04:2d:28:9c:8d:7d:
                    e2:b4:73:36:7d:17:27:a5:bf:4a:8f:8a:c1:cf:1d:
                    47:68:78:e4:ab:0b:92:81:93:3a:ac:f3:e3:60:ca:
                    f9:7d:85:83:06:56:27:6d:64:6e:0a:44:e4:82:58:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210645

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:16:fc:73:e1:d0:9f:f9:9d:4e:83:02:87:b1:29:ce:ca:
         69:e2:07:91:a1:7c:b6:fd:a2:7b:68:ce:de:f6:51:ce:a7:6b:
         a3:ec:76:0e:01:22:7e:ff:a7:d0:01:cc:15:3f:f1:67:0d:55:
         f0:0b:35:af:7f:01:7b:43:82:50:51:ad:9e:69:25:3b:68:88:
         31:e5:cd:8a:dd:26:c9:9a:2a:c4:67:c2:7a:a1:5f:06:43:e5:
         07:71:57:b2:11:b3:8a:2a:1c:b2:53:d7:9d:04:c0:10:c4:31:
         43:0f:f7:54:fb:3b:f3:2d:be:37:93:20:21:ee:d3:02:0f:0c:
         d1:05:9f:4c:ee:0f:c5:05:a9:56:1b:10:a4:4d:a1:6c:99:3f:
         3f:5a:e1:f3:eb:d9:89:3e:4d:e2:fc:51:90:66:f4:ef:b9:f7:
         b1:c3:6f:51:cc:43:44:f2:b9:2a:08:45:d3:88:28:87:a1:d7:
         bd:f0:89:7f:7d:1c:6e:ef:b2:eb:59:dd:95:fc:13:44:2a:17:
         41:9c:25:7f:ed:d9:94:78:77:8e:60:71:08:26:27:d9:66:f0:
         61:8e:10:ed:5b:31:e0:ad:de:96:ce:03:63:ac:af:e9:a5:fd:
         6f:9f:ab:95:44:ed:eb:6e:49:60:c5:11:05:24:8e:fb:af:3e:
         ba:f3:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----