Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
File:                     AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer (raw, json)
Hash identifier:          9B0zQ65D3APzNu3d8MtaT/TLwWk5VGpsVgX0fGcrvUQ=
Subject key identifier:   01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236968D3CC9414DE4EC816C5E2E0ECA7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214266

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:68:d3:cc:94:14:de:4e:c8:16:c5:e2:e0:ec:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=010d68a876cf5793fd00876254253d382779027b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:e2:a6:23:ad:79:39:69:61:cf:a0:2c:ef:
                    5c:db:4e:8b:1c:89:0e:b9:a7:bd:30:c6:7d:1e:39:
                    3c:4f:b4:5f:01:cc:bc:ac:ca:57:8f:ff:27:30:ff:
                    d1:9d:36:31:fe:07:ea:9f:5b:4c:2b:4b:ab:29:e3:
                    0c:cd:fd:a1:f9:1a:cf:bc:df:90:6b:3a:f4:b4:12:
                    0a:b6:2d:71:e2:15:88:e4:d9:37:35:25:aa:cb:b4:
                    af:68:88:ee:9b:54:36:1e:b0:42:92:4f:cc:86:d3:
                    be:55:cc:dd:2c:be:2a:c3:0b:71:a9:cd:40:db:d2:
                    47:e6:13:0a:40:26:46:e5:a1:9b:5d:4d:99:1a:ab:
                    83:f7:d6:44:fa:90:b0:c3:16:73:b8:ce:94:4e:9c:
                    54:5e:12:6f:a8:20:ce:04:27:8a:a1:12:f5:dd:96:
                    c2:89:62:e0:9d:75:f5:11:d8:77:b3:f1:3c:98:ac:
                    c9:fb:b9:ec:3a:e6:69:04:c5:e7:99:20:80:e2:dc:
                    2a:8a:fa:80:08:d5:af:be:56:4b:2a:b4:70:42:f1:
                    83:fd:20:94:1c:b3:d1:a3:0d:ee:3a:52:23:71:c4:
                    96:a2:ee:e1:04:39:db:63:d5:4e:c7:2f:7e:fe:62:
                    72:0e:e9:32:20:d1:2b:33:fd:3c:cb:53:8b:3c:39:
                    9d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214266

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:b0:c2:1e:f6:f5:f3:54:b8:ce:4d:66:23:3d:48:53:95:
         61:3a:ca:75:80:4c:e3:cc:ab:7f:6d:86:d6:bd:c7:97:b6:7d:
         98:0f:c1:74:35:f3:e5:ef:10:b9:e7:45:cd:ff:da:45:0c:8e:
         b7:b5:0a:5e:ea:ed:d0:49:85:42:e3:8d:7e:09:e6:2a:09:b1:
         64:c0:04:96:9b:c9:88:23:76:f6:96:55:89:a3:61:43:6a:1e:
         b5:37:61:e5:79:be:79:85:ee:69:15:d8:17:c1:95:6f:ac:03:
         12:8e:91:5b:2d:99:c4:0d:4a:5c:f3:65:d3:20:1f:75:1c:c6:
         46:f4:25:16:30:bd:e5:55:8b:86:7a:86:2f:42:8a:44:18:70:
         35:b3:33:5b:81:7f:78:a2:df:01:03:e8:f1:7d:b6:fd:fb:ab:
         07:0e:03:90:38:81:50:37:81:a2:27:a5:3b:3b:9a:14:c0:e4:
         1e:ce:12:ec:f7:f5:4c:f3:a0:09:9f:fb:96:e8:be:b1:56:86:
         bb:31:d1:fb:5e:c2:7b:fe:d6:ae:52:c2:75:68:c6:6b:d6:01:
         dc:62:fe:f3:f2:f7:8d:9a:ef:85:47:3c:85:ab:e6:9d:4b:62:
         8c:a2:cd:02:2b:31:52:fd:b0:3f:03:10:25:ca:89:7a:c1:cc:
         85:69:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----