Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
File:                     AKTVv_pzY0hD6QPjexj97g2sWFs.cer (raw, json)
Hash identifier:          0+Tg4FLYSxmLHA2Oh4787ij1VyefFQWcPrE7Ivs0l8A=
Subject key identifier:   00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019615815534AEB74877DACD9B466D93BA06
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 08 Apr 2025 13:05:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216326

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:15:81:55:34:ae:b7:48:77:da:cd:9b:46:6d:93:ba:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  8 13:05:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=00a4d5bffa73634843e903e37b18fdee0dac585b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:d0:d4:80:e2:d2:4a:c8:bf:c2:e9:cf:66:
                    18:ff:0c:22:d5:cf:08:f2:53:c2:ea:c5:a1:ac:be:
                    f8:b0:4d:57:c8:de:fd:a2:f3:c5:5a:0f:ac:3e:7d:
                    59:e5:bf:2b:93:0b:90:88:30:ce:ed:2c:75:58:8c:
                    2d:0a:0b:16:ea:13:26:59:aa:d0:27:82:68:e1:d4:
                    a9:f2:1e:2a:2e:0f:8c:2f:ea:2c:30:74:b2:03:70:
                    9a:9c:bb:de:75:00:0e:fd:17:16:3f:e1:57:49:2b:
                    8e:e6:97:33:7e:bb:dc:07:49:f5:06:41:e9:88:77:
                    af:b7:a7:9c:e6:ab:8d:49:45:4e:26:31:6d:11:60:
                    14:8b:0d:ff:4c:b6:27:dd:29:3e:97:96:94:0c:c0:
                    83:7b:4f:b3:cb:57:68:bf:dd:f4:8c:46:16:b4:c5:
                    b6:b9:46:d3:df:56:b6:f4:b7:f1:f6:97:3f:80:d0:
                    b3:14:85:ea:a6:94:66:18:9a:85:3c:36:9b:44:5e:
                    f7:0c:9e:1f:ed:46:d9:dd:43:4a:a7:62:89:0d:7f:
                    35:02:81:b2:67:5f:ff:29:c1:a3:55:19:05:f4:54:
                    c7:c4:0b:4f:aa:67:96:cc:cc:4f:64:b1:b8:be:a8:
                    af:ff:7d:a1:be:59:04:6d:81:2e:d9:54:9e:af:e7:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216326

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:74:95:68:66:4d:d7:19:ad:1f:a2:39:79:4a:d2:1e:b9:
         d6:0e:4b:3a:ef:a9:8e:ae:77:76:4c:e7:c1:aa:9f:e0:a9:ce:
         6d:cf:3c:58:be:25:9d:5a:25:63:bb:88:fa:31:83:f4:84:82:
         b3:ff:e2:f9:0f:36:23:50:70:9b:aa:5b:b0:44:2d:53:c8:f9:
         60:5d:ef:54:1d:f1:1d:32:7e:83:3a:9d:88:42:ba:56:7e:aa:
         67:6e:35:18:89:ed:1f:31:61:82:f8:f6:da:87:04:77:b3:f4:
         98:05:e7:e7:9d:4b:ca:2f:19:7c:55:bb:bd:01:5f:7a:6d:29:
         d5:e6:8e:fe:89:d3:de:63:24:a7:ae:d0:97:6e:4d:96:81:2e:
         a3:64:f0:7d:0c:3b:43:80:3d:a1:8c:d9:cc:08:d0:a3:90:fb:
         f4:a1:e3:56:84:5d:e9:92:0b:ec:0a:34:f0:a9:b3:cf:38:9f:
         ce:74:46:f9:2f:80:c6:b7:50:b8:27:94:11:59:bd:e5:12:70:
         7b:35:3a:31:79:dc:7f:3b:1e:61:7d:eb:10:a1:c7:89:1b:76:
         b3:06:b2:a1:37:0b:0a:fb:c1:df:cf:71:95:78:fd:78:85:16:
         71:76:05:f4:a2:87:47:f5:20:c5:42:7f:ad:94:91:74:3e:0a:
         c8:42:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----