Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
File:                     28wruvPg1DQqAU-LcPhzzumoysU.cer (raw, json)
Hash identifier:          pCM2ZHvV/MQboJYytPS6ddFgCeTzTXWiGUV2+sIcUBY=
Subject key identifier:   DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424459BA2557EC8AC58581950A4D3CAE3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:4128::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:9b:a2:55:7e:c8:ac:58:58:19:50:a4:d3:ca:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:10:bd:a3:8e:65:91:89:4d:5d:00:66:92:
                    cb:dd:61:31:de:51:fd:dc:66:26:88:18:e9:5f:65:
                    6e:81:c5:03:4e:d3:e8:ba:71:d1:ed:58:3f:a3:54:
                    6c:29:14:b4:b1:23:09:8d:ef:88:7a:68:fb:a1:b9:
                    b3:59:6d:44:79:9c:a1:30:a9:2e:f5:a7:dd:b1:1f:
                    2b:57:d9:46:e7:af:d2:d2:e6:83:6d:f8:37:8e:35:
                    1d:cb:1d:c0:89:92:de:c0:bd:16:cb:21:c0:4b:46:
                    c2:c5:fb:42:be:0f:7d:ab:99:46:6b:a9:66:b6:bf:
                    e3:9b:42:c6:3f:ed:39:9e:dd:25:1a:4a:02:21:a5:
                    6b:42:9d:50:a5:f8:65:97:6f:49:74:c4:c1:ed:0b:
                    1c:d8:00:71:5f:25:a5:fd:1e:ff:1e:2e:bb:06:70:
                    35:26:c0:1f:b2:82:9b:36:9f:9d:02:0d:f0:a7:b2:
                    bf:e0:c9:e8:41:6c:da:d3:84:4a:f6:7c:56:5a:3e:
                    4d:e6:ad:f5:1c:7b:85:02:9f:24:77:1f:f5:c9:d0:
                    4a:f1:41:77:f0:12:e8:80:4c:0f:1f:f4:1f:86:53:
                    9e:5a:8c:ee:61:97:77:e8:87:ab:a0:8c:44:53:02:
                    14:a3:8b:23:d0:f0:9e:00:a9:32:a2:b6:51:38:71:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4128::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:97:84:b9:35:81:52:fd:a7:b5:4b:10:f0:06:55:1c:1b:0a:
         6f:c5:e7:d9:b1:31:b4:51:dd:fc:10:e6:63:c3:42:5b:3c:74:
         c3:58:7c:76:5c:f3:56:0b:4d:09:bb:16:4a:26:05:9b:eb:83:
         e0:ff:31:ba:bf:e6:f0:d7:9e:9e:9e:2e:c9:d4:f5:66:93:2d:
         6a:45:84:f4:2c:c5:6e:e0:da:60:04:f7:04:41:51:ae:f1:60:
         14:84:28:c1:aa:5d:06:f4:6b:23:a9:5d:ca:51:db:e9:67:93:
         aa:92:16:7e:c1:dd:4b:2e:74:a6:6f:17:94:a9:72:0d:55:bf:
         8c:19:6e:63:c5:8e:56:9f:cb:b6:ed:eb:0a:99:d8:e2:dc:a6:
         4c:73:5c:f5:fb:3f:42:40:5a:ec:60:79:d1:f6:01:12:5d:b4:
         eb:50:4d:74:c7:46:85:b9:e8:0c:d1:a5:f7:ad:ee:52:18:91:
         0e:1c:68:97:0a:bd:b8:31:4d:b4:e5:48:2c:3f:a3:a0:5d:88:
         77:e7:62:47:81:de:45:b2:24:42:1f:b8:23:ef:29:df:3a:b3:
         53:3e:f0:1b:ec:f7:58:c2:50:0e:d8:60:98:6f:d5:54:5e:b1:
         bb:2e:d6:81:78:2a:1d:97:8a:6e:cc:82:8b:10:0e:b6:fd:c4:
         18:34:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----