Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
File:                     3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer (raw, json)
Hash identifier:          mBrj7mtPRZ7erSKW5QUPctPDRW8Ty7RhTyYuLFbArnQ=
Subject key identifier:   DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB57B614971A3EB25A4193BE6BCE22
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210376

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:57:b6:14:97:1a:3e:b2:5a:41:93:be:6b:ce:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:67:3d:35:76:b5:ce:22:ce:81:31:85:1a:
                    34:6c:56:05:ad:ca:72:62:e2:2e:12:98:77:c0:c1:
                    a0:23:90:ba:8e:ad:d0:89:d7:5d:b7:89:5e:8c:1f:
                    b0:a8:bb:d5:fd:65:f6:01:cb:3e:3f:18:cf:ca:a8:
                    5c:f3:8c:8b:31:0f:4d:a1:14:c8:36:1c:c7:ae:0b:
                    da:b6:bc:ab:ab:58:66:c9:3a:82:df:6d:e7:67:1c:
                    cc:89:5b:2a:da:05:61:19:6c:36:83:9b:c2:b9:f8:
                    cf:6e:de:6a:64:61:41:43:9c:72:0b:c2:9d:84:5e:
                    e6:2f:0b:ac:14:a2:97:27:bc:b9:99:d4:8f:09:47:
                    44:7c:4a:0c:4f:bf:d0:5f:43:fc:3e:12:43:4d:bd:
                    75:ac:51:02:c9:4d:12:d0:f0:4a:b1:d1:4c:c8:b6:
                    fe:a4:fa:fd:9a:26:85:e8:b3:09:5a:d1:bc:02:e8:
                    14:b1:1b:b8:30:c5:5f:ab:83:e5:89:10:8d:bd:98:
                    1b:9d:dd:8d:98:81:e9:24:0f:a8:4b:a0:2c:61:fd:
                    5a:11:24:03:6f:30:c2:cd:48:92:e4:ea:db:28:ff:
                    7c:9a:fb:e5:eb:e8:de:0b:97:4f:84:42:6d:3d:f1:
                    4d:7e:0e:91:42:07:89:97:06:d9:43:70:59:64:c8:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210376

    Signature Algorithm: sha256WithRSAEncryption
         77:72:78:ca:a2:1f:03:cb:83:ab:38:ce:65:ba:bb:dd:eb:2d:
         cc:e1:09:2e:9e:e7:5c:fc:05:0a:3f:3e:03:73:ea:38:78:2b:
         dc:10:17:6a:d2:b5:2c:f8:2e:9f:41:61:d5:1f:ee:57:7d:c5:
         f5:e0:2d:17:1a:3c:10:77:38:d6:eb:f7:b2:25:f3:82:33:3b:
         85:56:a5:59:a6:9d:fe:e0:47:df:e3:b8:36:80:86:9d:6c:0d:
         e9:db:40:e8:9b:7c:49:a6:7d:25:b7:6a:12:54:03:9e:fa:24:
         ec:06:21:a0:74:36:5f:6d:08:5a:49:0f:1d:a3:9a:81:c7:b0:
         98:cd:81:11:b6:65:fc:93:40:51:80:28:cb:21:c2:4d:0f:82:
         7c:09:af:e3:75:bd:4a:f5:45:97:95:1f:07:2c:b5:86:ee:73:
         12:f3:05:57:58:68:f1:42:93:46:64:91:46:68:62:20:6b:ce:
         e0:84:be:f3:7e:7a:b5:9a:56:e3:a9:2d:ea:a9:4a:3a:cc:f6:
         8a:f7:72:1b:20:0f:0a:bb:e2:4f:66:d4:66:61:91:84:96:6d:
         72:63:09:13:75:4e:79:c4:3c:4c:b4:83:04:0f:d1:e1:a9:d7:
         21:77:db:5b:94:83:a9:4c:88:e7:80:bb:6c:39:96:47:d4:a5:
         de:22:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----