Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
File:                     AIsoBYgFTtjERuJ7ScrEVYip6YA.cer (raw, json)
Hash identifier:          QaVkJn7KupKgnr7KlPWIORCQfcWx/F61nJg+NqCRAA8=
Subject key identifier:   00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6A5D944F55F5FB6FB1494C5BB33AE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212520

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:a5:d9:44:f5:5f:5f:b6:fb:14:94:c5:bb:33:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=008b280588054ed8c446e27b49cac45588a9e980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:f5:95:41:27:9d:d7:b4:aa:18:f9:02:e9:
                    09:d9:ff:98:b5:28:e7:8f:69:a4:b9:5c:e9:44:c3:
                    79:de:ed:b5:0f:e4:89:e1:8c:b1:05:b2:87:f1:4e:
                    21:55:31:16:76:dc:e8:99:48:a7:41:56:aa:dd:23:
                    4c:0b:05:af:84:28:d1:a6:16:a1:f7:9c:fb:e7:a5:
                    3b:be:de:71:93:d7:21:96:92:4a:e4:52:dd:f6:03:
                    54:cd:a1:2f:ac:c3:d7:76:5f:61:92:3f:34:c3:4c:
                    bd:db:7c:8c:28:57:95:f3:f0:03:b6:02:82:a7:45:
                    c7:b2:c2:4d:d5:23:fa:f6:28:c9:f8:4b:e1:81:49:
                    e5:dd:f2:8b:cb:a9:fa:24:56:d9:88:95:0b:99:f1:
                    df:cd:2a:cb:43:c6:71:de:04:8e:45:11:49:97:c6:
                    9f:4c:bc:bd:8d:37:f7:ed:2c:31:47:cc:a5:c4:55:
                    f0:82:21:f7:bb:eb:2a:39:55:07:26:c3:d3:99:de:
                    24:7c:48:7b:70:a1:5f:7c:aa:78:78:a6:2f:3a:6b:
                    d8:68:aa:c2:88:27:61:dd:3e:21:f3:40:dc:a3:ea:
                    eb:98:d0:c1:47:fd:d7:46:3f:35:12:4b:62:02:77:
                    67:96:a8:77:45:d7:00:ac:d1:47:e2:c5:9f:a8:a6:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212520

    Signature Algorithm: sha256WithRSAEncryption
         13:7b:6e:2d:3a:d0:d1:b6:0d:e2:27:0a:b5:5d:99:f5:6f:e5:
         6d:e4:1d:70:c4:0f:7a:d3:60:d5:92:57:f3:c7:90:5f:d4:5d:
         04:54:6f:df:96:0d:7c:61:d7:01:8e:16:d4:90:f1:d0:ca:c1:
         a8:85:ac:83:26:68:e8:aa:75:c1:a2:36:99:bc:06:1f:fa:31:
         7e:63:6d:02:5b:b6:47:5a:81:04:bc:4d:92:bd:0e:1d:85:70:
         00:13:d3:34:93:af:08:bb:9c:36:f9:bc:0e:1c:2f:da:53:2b:
         ed:08:4b:30:03:f9:e6:96:fb:5c:e2:2e:f7:80:eb:f1:8b:3d:
         a8:37:03:e7:45:8f:6a:54:84:0c:2f:4c:1f:36:76:e7:45:29:
         f0:db:06:5f:c6:a8:66:a7:30:6e:8d:62:1b:b3:3c:86:44:ec:
         e6:e6:85:8e:6c:2b:b9:26:fc:43:25:57:b6:a2:4a:a5:ef:80:
         13:33:f9:cb:31:eb:09:3e:95:26:ef:9b:db:8c:65:47:35:7b:
         82:3e:64:e0:44:54:9b:34:26:22:aa:22:ce:0c:fc:3a:c6:2d:
         c7:e4:35:57:c7:68:89:46:90:d1:d9:09:60:da:29:49:b0:e2:
         77:87:64:bc:f6:85:6c:c8:b2:17:b3:63:58:34:cf:40:d2:84:
         e8:ee:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----