Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
File:                     8aDGf_hZ9VWviSGTiIfGCFJppAI.cer (raw, json)
Hash identifier:          FtDep79axKi94QAVkfcfIvxqy0rX3Y1J698TYRtwR7Y=
Subject key identifier:   F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B37B4EBEF2D6123C928813A75C1F15
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202752

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b3:7b:4e:be:f2:d6:12:3c:92:88:13:a7:5c:1f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1a0c67ff859f555af8921938887c6085269a402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:5e:c0:7c:16:46:32:74:73:6a:70:4d:f8:
                    0a:1a:49:5b:63:7e:07:b1:d7:27:b6:0e:15:24:aa:
                    7e:a0:ec:4b:ad:de:22:cd:72:33:93:73:31:2e:1e:
                    06:fb:8b:95:73:8c:c6:fa:a7:af:7a:6a:70:f0:ff:
                    01:64:11:28:4f:b5:e5:ce:e8:99:7b:a3:26:79:29:
                    60:80:99:4e:1d:31:ce:d7:9c:e5:f2:11:5e:41:10:
                    f2:b0:8f:4d:5b:39:31:9f:ad:8e:ab:b2:75:12:87:
                    34:83:b5:b3:95:98:44:a7:53:89:c6:65:80:d0:b3:
                    75:18:37:d3:13:df:ee:81:68:b5:7e:b1:80:7d:9a:
                    7d:49:30:12:8e:d9:f4:cf:4c:8e:29:dc:7f:c9:86:
                    7a:88:28:07:5a:4d:f0:a6:6e:53:bc:42:7f:ae:d1:
                    fe:4c:8a:2f:43:5d:2e:e0:18:c2:9b:b3:7d:f5:b3:
                    e0:f5:51:fa:54:12:94:9f:ce:5c:58:32:72:0d:18:
                    50:5d:7a:f0:7b:6f:2a:a7:cc:ef:a2:03:a6:50:a9:
                    f5:e4:b4:10:4d:b5:59:84:44:44:46:a7:3b:92:11:
                    78:4c:eb:b6:0d:67:1d:f0:ea:69:c9:36:06:b5:ac:
                    13:57:05:6d:a5:86:dc:9b:81:5f:ed:73:c3:17:93:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202752

    Signature Algorithm: sha256WithRSAEncryption
         2a:f0:f2:74:91:1a:7c:96:f6:d6:3e:54:ff:04:ae:5f:ca:aa:
         6a:85:44:c7:14:40:75:32:39:6a:32:4b:a9:fb:98:85:2f:6a:
         6d:36:80:ef:7c:05:2e:64:31:e8:2e:64:69:b4:73:e1:ac:64:
         06:6c:6a:44:86:1a:37:b9:02:65:8d:03:6e:e2:54:05:78:e1:
         59:d5:7c:63:10:aa:83:d4:b3:03:a2:18:9e:9f:bd:d0:68:39:
         15:af:f7:1c:9a:50:a3:70:7f:3f:58:40:2c:ae:76:22:de:6b:
         f4:52:ea:48:b0:d0:03:dc:65:85:f5:13:a0:88:de:46:32:15:
         f4:20:a7:8e:84:6b:9c:ac:d6:47:d3:7c:b0:a0:fd:69:06:d6:
         ac:d2:01:f5:bf:31:68:cf:af:0c:0b:f4:ea:e2:af:f2:39:a2:
         71:fd:dd:74:1c:ed:d5:29:b2:23:b0:6f:99:b5:83:e8:d9:2f:
         6b:ec:d7:a8:1b:1b:e3:33:23:d9:59:f6:26:ae:40:45:7d:91:
         dd:02:62:94:43:d2:e0:6f:50:2f:9b:04:f1:81:f9:b8:b0:98:
         27:14:c5:4f:44:d5:f2:95:99:1f:b4:13:fc:7c:f5:40:c5:df:
         50:5e:0a:20:3a:77:61:ba:31:64:ff:43:a0:b0:58:bb:2d:1c:
         35:a0:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----