Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
File:                     9kUa8REg2PqJjLYhLOqMph3Fm5I.cer (raw, json)
Hash identifier:          U9g9xw/oKkK7kedt8MUo437rR3ofs8SU6D73DvwVetU=
Subject key identifier:   F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DA6A4AD01CEA717761E8E3588186E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35503
                          IP: 193.192.56.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:a6:a4:ad:01:ce:a7:17:76:1e:8e:35:88:18:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2d:f3:ea:35:fb:f7:b6:41:49:4f:64:48:64:
                    d5:20:94:bf:41:6e:dd:1e:0b:e6:6c:64:5f:03:77:
                    7f:5e:b5:ee:0a:d4:0f:89:72:88:85:f1:b1:ee:b5:
                    86:61:a2:3f:cd:68:9f:25:ed:0e:98:08:64:c3:89:
                    09:22:0d:00:36:bb:9f:2a:d2:91:c1:88:ce:51:54:
                    a1:be:d3:b7:5a:23:44:ba:ed:50:0c:c4:f7:15:6b:
                    39:9f:17:06:37:35:c0:db:ef:f9:a8:9d:09:63:8c:
                    8b:20:75:07:52:27:81:2d:1c:91:1c:9e:8c:c7:4f:
                    58:0c:28:00:72:28:23:49:9d:54:04:b0:e8:df:5d:
                    ed:c0:38:a1:6c:df:77:b9:8b:5e:a9:f1:ee:c7:92:
                    22:03:c0:de:55:16:57:f4:51:99:41:07:58:41:e0:
                    5d:a5:e7:9c:ef:b6:c5:29:f6:f4:9e:63:6f:10:0e:
                    1c:24:f4:d2:78:2a:ea:9e:21:ed:d0:18:f2:4d:d4:
                    03:d3:f0:cc:3c:f7:ed:06:86:98:8f:b5:00:46:3c:
                    a0:52:00:48:6d:1f:c7:80:a0:30:9e:ca:0f:4f:52:
                    7a:40:ec:76:ac:78:ce:4b:73:30:2e:01:cc:5a:a3:
                    b7:c0:f5:43:72:27:99:63:26:6e:64:f5:b4:5f:c0:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.192.56.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35503

    Signature Algorithm: sha256WithRSAEncryption
         20:bd:b1:e2:ce:0f:15:10:8a:1c:80:3f:ae:b3:ed:c9:33:4f:
         30:27:a9:0a:fb:c5:52:9e:9b:1d:0f:3f:eb:f0:ae:d7:49:fa:
         ed:1f:fd:ba:46:a9:a0:70:38:40:4e:d4:bf:05:b8:62:b2:7f:
         a2:a8:79:b1:b0:ca:82:3d:76:06:d5:d2:19:ed:1a:50:39:46:
         57:57:63:83:20:a1:c6:e8:3a:da:b5:32:d1:a9:80:4c:86:59:
         4d:8d:45:8a:5b:8c:ca:db:5c:89:2e:4d:37:cc:52:79:8a:3c:
         15:83:da:dd:1f:d2:74:df:2b:92:cb:34:02:07:b3:bd:2a:92:
         8f:d7:95:cb:70:bc:3a:4c:eb:63:ad:76:c7:02:74:93:8b:58:
         6e:25:1b:f5:60:a8:9a:0a:5d:65:13:2b:27:27:96:07:5c:c6:
         a4:fb:d9:e6:8d:3a:ea:4a:17:0b:2a:8f:fe:ea:7d:9c:68:8b:
         a5:82:a7:13:e2:f6:9a:58:ea:85:0e:44:3b:18:44:4d:f3:64:
         8a:3b:59:4d:3e:ba:37:66:5c:7e:c9:5a:26:72:b6:c2:38:e5:
         03:59:68:ae:72:ee:9d:40:50:14:83:f1:0e:50:d8:d8:b2:97:
         2f:a9:23:56:7d:27:47:9e:c6:4b:39:b8:1d:de:10:41:a8:3c:
         75:ae:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----