Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
File:                     9qiFSCQ7bikKBtKaKzcQS3et5vw.cer (raw, json)
Hash identifier:          qCAREDVF3kq0mZsRlqZKF/n+v1jnBjA61raY+PXqQAo=
Subject key identifier:   F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0196173650C866EC1836AF8F16BFE4542971
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 08 Apr 2025 21:02:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210734

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:17:36:50:c8:66:ec:18:36:af:8f:16:bf:e4:54:29:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  8 21:02:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:75:32:88:a7:6d:54:e0:4a:43:16:d6:ff:52:
                    28:96:02:a0:32:8d:fb:48:ff:f3:25:49:b0:60:a8:
                    96:f1:77:ed:9e:7b:6d:b7:dc:30:60:0d:b3:1b:64:
                    2b:1c:bb:a4:5e:a1:68:fc:d6:57:67:67:bb:7e:ec:
                    30:ae:b4:2b:b1:ed:84:53:d6:0b:35:91:65:3b:46:
                    04:12:d2:97:1a:a4:e0:33:be:93:d5:44:aa:9b:0d:
                    cb:87:53:b7:4a:d1:68:d0:48:e8:a6:e2:cf:41:22:
                    d8:3b:75:f2:fc:a5:0f:7b:99:ea:eb:03:73:ed:fc:
                    64:e0:c1:3e:f9:90:c5:d3:ff:c7:3a:8a:b5:dd:2f:
                    82:8b:2b:e7:cd:79:f3:b4:13:6a:d5:30:e3:9b:52:
                    b6:fb:15:ad:58:74:41:30:3c:a0:32:49:da:8d:8e:
                    1f:53:aa:42:47:83:92:03:dc:c5:f5:7a:4a:f3:da:
                    ea:59:30:47:e9:ac:ea:77:2b:2e:de:6a:84:0e:d0:
                    94:0f:82:fc:8f:ab:b9:3d:04:09:c7:47:56:4c:26:
                    0c:08:93:8c:9a:a8:42:02:02:3c:82:f2:34:24:34:
                    17:b9:3c:24:74:c5:44:e8:c9:2d:0f:c9:dd:5c:67:
                    92:57:12:7b:8b:1f:01:e7:af:af:e6:8f:9e:4c:1d:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210734

    Signature Algorithm: sha256WithRSAEncryption
         81:1f:93:56:94:37:bc:fe:74:ed:3f:30:36:5d:9f:f4:74:12:
         22:02:cf:a3:0b:32:97:26:78:4b:85:40:27:be:d2:c7:25:69:
         71:ec:71:c2:a3:2c:83:42:5c:f0:82:94:00:5e:ec:6c:70:fe:
         44:aa:ab:49:b7:97:a9:ef:b7:33:f6:f9:18:f1:b0:7f:ee:c1:
         90:8e:aa:a3:26:2d:dc:2c:8d:bc:c4:3c:d8:11:84:c9:79:4b:
         71:b7:d8:6c:39:b7:c2:2f:d6:79:96:62:55:d3:3b:c5:f8:77:
         21:d1:99:ec:38:f3:00:f6:a6:10:4c:3d:72:8c:f0:d5:63:e2:
         55:fd:28:2c:c5:e4:4f:23:ff:ea:58:18:bc:65:db:8c:fb:41:
         1f:69:06:c3:67:c7:20:8b:93:e6:f1:b1:28:d8:80:eb:a0:0c:
         3f:6f:57:98:b7:1a:92:85:db:9f:98:81:86:0b:7f:0f:d1:a1:
         00:01:41:92:54:55:65:88:ab:1a:67:21:98:9a:d6:9c:f3:d4:
         6c:6d:00:c6:ba:67:6d:2d:e0:71:b3:9a:74:11:f1:a0:60:48:
         cd:a7:2a:76:12:88:3a:15:be:c6:74:dd:9c:29:41:53:ec:5e:
         d4:49:ee:3f:ef:84:29:d2:f7:a1:c1:ea:22:0f:33:dc:b3:16:
         dd:3a:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:57 2025 by rpki-client on console.sobornost.net