Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
File:                     A2G_1FDhLplUBKROs3ovnkK_4Hw.cer (raw, json)
Hash identifier:          ZkZp/lVuQUSCTzXzHQ+zJ8CalC18CjO3AVcqri0K4Xw=
Subject key identifier:   03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC439B7FA6947CA8D1D0702184E567
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214880

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:43:9b:7f:a6:94:7c:a8:d1:d0:70:21:84:e5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:26:48:53:13:45:e0:52:b0:29:b6:86:50:e4:
                    d0:39:8a:3b:4d:e7:9d:24:06:72:ff:d7:19:87:fe:
                    0e:b8:e8:da:8a:87:6e:dd:98:eb:cb:c7:06:69:99:
                    d6:44:cc:3d:3d:a5:ed:90:92:9c:4a:ef:4a:04:b6:
                    24:9a:92:a6:5f:52:39:4e:b2:ba:db:fe:86:af:e7:
                    77:b5:4c:44:c5:62:c7:34:d4:24:ab:a2:0c:67:f5:
                    08:8c:4b:73:5e:ee:39:21:a5:74:91:47:ab:97:21:
                    e2:9b:f9:99:4c:2b:2c:78:c4:a4:0d:93:96:a5:de:
                    01:d5:8f:5a:a3:fd:2f:15:d2:37:fa:03:82:b9:22:
                    03:c9:91:fe:fe:00:e5:a8:33:c2:81:f3:1a:2d:8e:
                    02:d2:fa:68:cf:0b:f3:bc:67:75:35:64:6f:2d:d0:
                    1c:ea:fe:70:3e:e4:6e:21:b8:71:e9:18:28:c9:3e:
                    f0:3c:bb:89:68:ca:87:fb:45:a4:66:0f:c3:e0:20:
                    f0:10:16:1c:27:55:89:52:1a:95:90:59:60:d9:2e:
                    69:ac:f7:bc:27:c6:aa:67:51:e2:f7:42:57:26:de:
                    34:f2:81:b1:8d:de:cc:a0:72:6c:cb:71:71:87:5a:
                    43:c8:ab:4b:60:d1:14:c2:8b:b5:18:be:0d:3b:b0:
                    7e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214880

    Signature Algorithm: sha256WithRSAEncryption
         27:fe:ae:8b:ab:10:e7:ca:dc:63:23:73:03:01:be:25:31:b9:
         1e:59:14:73:c6:8c:cb:90:4a:e1:fa:91:94:53:f9:ab:2e:4c:
         d4:1b:36:ab:05:0e:0f:3d:26:c7:31:50:a3:f6:e3:08:65:4e:
         17:24:c8:de:c7:d3:49:c6:18:e0:f8:41:48:a5:ac:a8:92:ae:
         f9:75:5d:41:79:55:ec:e1:8e:d9:6e:36:37:5e:6e:e3:34:df:
         ca:5e:ea:15:84:e8:22:95:af:c0:b8:2d:42:34:1d:4c:4a:f9:
         21:12:ae:2d:2b:3f:b3:ba:95:59:73:9b:ba:13:e8:3d:83:7c:
         7b:ab:1d:34:34:03:b7:e6:00:c1:55:e7:6b:88:ec:21:b2:8e:
         ba:b2:7b:9e:5d:52:fa:e9:b1:d2:ac:4d:35:d5:75:7c:54:2c:
         d2:94:69:15:e8:a6:79:33:35:11:e5:70:a8:b0:84:2a:bd:88:
         ad:c7:a4:86:89:e7:7b:19:87:73:b5:6c:cf:47:1c:f2:36:5e:
         d8:c5:b5:7f:8c:bc:39:e5:9b:3d:f1:de:e8:f9:74:0d:2f:63:
         25:7c:54:4c:c2:11:38:ae:d7:bb:b8:d8:fb:48:86:e1:e1:75:
         10:09:e1:fc:5d:32:14:89:10:fe:75:ad:67:67:ee:6d:48:a3:
         79:30:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----