Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
File:                     9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer (raw, json)
Hash identifier:          bUKKWVSOqhGarW5li9ZBKk46fS1c90d4K74iiNJZAZc=
Subject key identifier:   F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6DF1DE25BB014AD46B2239E9B7E99
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51063

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:df:1d:e2:5b:b0:14:ad:46:b2:23:9e:9b:7e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:6c:ea:d0:81:95:7f:14:51:31:a3:84:ca:
                    0f:80:cc:ad:81:5f:6c:05:b0:c1:36:3f:e9:83:34:
                    5c:63:85:e0:ba:66:7c:cc:47:bc:36:7d:22:ac:ce:
                    da:c9:da:2a:55:5f:10:9b:7c:8d:6e:0f:9e:e5:41:
                    6e:80:4e:96:ed:2f:0e:da:d3:a2:ca:1f:f1:7d:c7:
                    02:6b:02:b7:74:37:57:2b:ce:a4:af:a5:aa:b4:97:
                    51:59:22:3f:d6:7f:ed:2d:67:cf:1f:39:5e:47:00:
                    3d:33:94:93:b1:cc:e9:99:24:59:7e:1e:f7:1a:23:
                    d6:ec:17:50:47:33:30:28:23:15:fd:6f:50:f5:55:
                    97:cf:7d:73:a7:2d:88:6f:55:54:a5:09:5c:5d:86:
                    c0:b3:8a:20:e5:7b:f7:22:a9:b6:8f:25:c7:7a:ca:
                    ab:d0:97:5d:9c:20:d5:ed:77:90:e8:e2:13:9d:c4:
                    db:3c:58:9a:06:81:d9:9d:0e:9b:3b:f0:f3:d9:db:
                    55:6d:d4:fd:86:64:0c:5f:56:0b:ee:29:ba:b2:a6:
                    79:e4:e8:b1:d6:63:db:f0:84:9f:dd:98:98:30:0e:
                    8e:8e:4e:2a:d1:70:ce:fe:50:20:da:57:42:92:94:
                    56:87:16:1b:33:09:9a:0c:f0:ee:28:92:4a:d9:f2:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51063

    Signature Algorithm: sha256WithRSAEncryption
         27:82:fb:91:53:b8:6e:26:e8:6c:9f:0b:b6:58:86:e7:0a:f5:
         96:2f:72:fa:12:3f:c1:24:41:b8:e9:46:89:eb:ca:81:74:58:
         1f:fc:df:4e:b3:07:29:f1:0e:6e:4d:a0:9f:ce:91:2c:60:cc:
         86:59:f9:37:36:0b:84:87:07:84:3f:6b:9d:d5:16:44:7e:83:
         f2:77:98:08:79:00:ed:40:f3:38:23:7a:3d:5c:00:5f:0d:3a:
         0d:af:f0:33:45:8c:46:25:ea:89:9c:3e:75:9b:50:27:84:4f:
         e8:e8:be:42:bb:bc:e4:a7:ca:7d:d6:53:5c:db:6e:e5:9f:d2:
         25:bb:67:31:88:15:60:bd:ad:44:3e:5e:2b:50:f2:1e:56:39:
         3e:e6:2c:c2:7c:e0:5c:83:cf:f7:e6:bc:dc:92:14:84:92:68:
         83:40:dd:e2:c5:7a:ef:c9:3c:97:f2:da:82:40:39:d2:b2:5e:
         57:55:06:79:6b:a3:92:c0:9c:b2:44:03:fd:80:44:1c:15:bf:
         17:26:6a:16:b3:87:85:cc:df:3f:f9:72:f7:ca:4f:fb:ff:5e:
         6a:31:b1:ac:5d:a0:1e:9f:67:f8:56:5e:e6:39:ca:0f:22:75:
         98:8a:fc:88:4f:b3:0f:ee:d6:91:15:69:32:49:85:1c:a6:36:
         80:3c:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----