Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer (raw, json)
Hash identifier:          vAF43YqgAP2AWNj+x2fciL59xUe3I3szCPjiHuM06vQ=
Subject key identifier:   F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C1660999697DA5F326A3C6D04CAAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215759
                          IP: 2a14:6680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:16:60:99:96:97:da:5f:32:6a:3c:6d:04:ca:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f709528b8828b4d826355e2c52237d642071cd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:56:88:b6:db:96:f3:66:ec:0d:dd:4a:cc:
                    dc:15:97:87:87:51:e2:e2:1d:28:3f:1e:6d:c0:0e:
                    5f:d0:ef:5c:19:e8:1f:c9:54:a8:57:5f:72:7c:cb:
                    8b:fb:55:39:10:2c:ac:4d:00:dd:37:13:d1:9a:bb:
                    2b:8c:b8:32:aa:79:00:00:40:58:8e:75:49:f5:20:
                    78:77:b3:8c:e2:07:43:f1:21:e1:28:bf:93:d8:47:
                    c6:21:6e:b8:2d:0a:2c:42:08:ec:b5:3d:15:4f:d5:
                    2f:27:d7:43:84:d6:cb:f0:78:4d:2e:44:7e:2c:a1:
                    8f:d4:d4:9c:55:87:0f:4d:3c:ab:0e:c1:00:80:80:
                    8e:2a:9e:88:30:42:59:7c:16:eb:a0:be:2c:82:f6:
                    78:4a:02:d5:bc:5b:aa:a3:26:58:f5:12:cc:3b:bd:
                    7a:c4:ce:bd:e1:a4:cf:08:43:c0:e4:cb:10:78:16:
                    ae:65:b7:03:10:7d:34:f1:78:12:52:34:5d:2f:8c:
                    13:80:ad:36:92:40:bf:b9:1f:b8:11:aa:7d:f0:95:
                    2e:e6:44:e9:73:0d:8f:cb:4b:c7:fb:3f:b3:2b:52:
                    20:72:6f:f6:2e:ad:75:7d:d1:be:2d:06:ab:9a:02:
                    4e:0f:36:0b:04:95:d3:86:20:fa:b8:d9:54:a7:89:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215759

    Signature Algorithm: sha256WithRSAEncryption
         03:46:2d:2e:e5:6f:7b:75:99:75:65:ed:1f:98:42:5a:1f:83:
         2b:cb:78:8c:62:ca:91:f5:fb:e7:99:fd:3b:cb:45:21:9a:c4:
         e5:d7:08:93:8c:5f:3c:a5:be:a3:ac:b9:7b:84:43:e2:f7:e1:
         26:93:6d:e0:96:1d:32:82:81:59:25:c1:73:90:75:06:df:59:
         75:6c:dc:e5:d3:5b:6f:0d:e3:47:ed:90:24:02:ac:77:2b:c9:
         d1:b9:2b:18:89:32:12:f7:ee:91:47:7e:47:d5:b2:73:fa:fa:
         35:32:70:f3:52:d1:95:5d:ea:de:6f:8e:74:8f:9c:25:d3:c9:
         40:79:80:6d:cd:76:52:46:52:40:0e:64:a0:b3:e8:93:73:e4:
         92:9a:fa:8d:b1:83:9c:58:ed:f1:5e:d4:9d:85:47:ab:a1:b5:
         1c:db:a8:ba:c8:62:80:5d:8b:43:c6:d7:67:0a:cf:8a:d7:65:
         06:1b:a6:01:a3:be:ec:e8:e3:10:6e:fb:95:5f:3a:f5:43:58:
         69:3b:91:b5:b4:9c:e5:6c:4f:e1:6a:db:cd:14:1a:99:52:76:
         65:5e:f8:1b:15:e9:4d:b9:12:b1:53:3f:ec:84:c1:93:00:1e:
         78:ed:40:c5:26:62:76:14:eb:41:5e:70:92:13:be:4f:4a:a6:
         66:c7:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----