Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
File:                     9IFCCQRj_g9JoTDRUYZql3F9RCo.cer (raw, json)
Hash identifier:          ikibzkSh7g+w5FASYsktfBwYKthskdWhKEZvzZAIeP8=
Subject key identifier:   F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAA8BAA7201E187A4D9DD22CFD0E79
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214218

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:a8:ba:a7:20:1e:18:7a:4d:9d:d2:2c:fd:0e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f48142090463fe0f49a130d151866a97717d442a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:c6:76:86:28:53:c0:6f:2f:60:74:f6:51:
                    7f:c8:18:16:cf:29:77:35:b4:b3:2c:c7:38:51:93:
                    b5:63:ec:73:2f:5e:a8:42:61:97:f6:4b:23:97:ff:
                    b4:39:05:a3:ee:dc:59:eb:e5:3b:f9:c7:2d:0a:0a:
                    c8:f3:f8:62:6c:77:e8:16:f7:ae:fb:e9:e9:b7:77:
                    67:51:87:67:2b:4a:f1:e2:db:55:27:cd:75:3f:01:
                    4f:a3:6d:a9:e9:62:bc:24:cd:5c:bd:3c:b4:e0:b5:
                    2d:8c:2b:f2:6e:bc:f6:7e:dd:fd:48:44:b4:42:a5:
                    df:a1:dd:7d:c0:75:18:be:57:e2:94:87:a8:76:53:
                    1d:4b:3f:b4:61:ec:8c:0b:aa:26:83:18:e5:f6:02:
                    84:ce:82:2a:2c:bf:46:db:07:a0:fb:54:43:e2:36:
                    23:dd:84:9e:54:e0:87:5b:8a:70:6a:46:c0:63:c9:
                    57:5e:9d:0b:46:29:d8:7b:a3:3d:26:ae:6b:5f:17:
                    2b:19:77:65:c1:c6:e7:36:e8:70:08:da:60:0c:5b:
                    50:f7:53:76:42:6c:57:7c:4c:9c:38:38:2a:cc:9f:
                    bb:16:8b:bc:c4:f1:43:5b:da:44:1a:ca:23:86:82:
                    e0:54:9c:96:2b:b5:4b:34:8f:a4:dc:e7:37:3c:2f:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214218

    Signature Algorithm: sha256WithRSAEncryption
         8f:ff:f2:9b:37:65:24:c7:c3:3f:10:f9:6a:8b:73:bb:1d:cb:
         ea:24:09:e6:c4:a1:1d:c5:0f:1f:7d:68:66:68:ab:3e:9e:e6:
         3b:7e:59:70:da:64:5a:05:70:8a:89:d6:29:04:be:51:87:08:
         98:cf:56:4f:79:37:af:81:c8:d7:e7:51:86:33:38:f9:db:52:
         90:ef:5e:3b:3f:cb:6e:fa:46:c0:fc:e8:a2:ee:be:6b:08:98:
         1a:33:ff:ff:18:c6:8f:e2:fc:7b:a5:49:14:47:50:c0:c6:c7:
         23:95:7d:0c:ec:bb:71:ec:f1:7d:7d:13:2d:01:14:db:8e:03:
         32:98:fb:3a:e5:4e:31:57:44:68:9d:c8:8a:7d:d2:d9:1d:a5:
         5a:d2:78:c3:11:17:b5:ac:1a:7d:01:e5:74:40:5f:f5:0e:00:
         51:e8:9c:ae:c3:38:0d:63:bd:54:f3:2a:43:73:ab:72:dd:80:
         f1:bf:f7:89:74:15:03:29:56:98:2d:1c:f3:76:4c:26:58:cf:
         87:41:73:2c:48:59:8c:32:67:89:6b:9d:2b:5a:4c:b1:9d:f2:
         ca:24:f1:10:52:18:5b:69:3d:71:8a:f4:12:20:c2:43:a6:43:
         46:10:19:ac:f4:df:49:b9:b5:39:a4:0e:1f:a3:0d:d3:0c:a8:
         87:cd:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----