Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.cer (raw, json)
Hash identifier:          BnJNfrtM1w4VuL2qTdhZdqZ153M8ptW+eEVBb149A1Y=
Subject key identifier:   03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB8CFFC8BCE7DAFC28C4BD5B19C526
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35348

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:8c:ff:c8:bc:e7:da:fc:28:c4:bd:5b:19:c5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:62:88:03:06:b7:a7:f3:23:35:db:ee:5d:69:
                    bb:de:31:35:48:32:c2:64:3e:3e:36:06:27:43:e6:
                    dc:f4:c6:f8:6d:cd:6b:27:79:a3:3d:8d:dd:14:86:
                    3f:04:6f:50:99:12:97:59:d7:67:43:b1:55:ba:b9:
                    ce:1b:7f:ab:80:64:7a:ce:ef:3b:85:00:b8:98:e7:
                    3e:54:e4:a7:dd:83:58:80:1a:c0:f7:b8:6c:8c:22:
                    45:98:bc:3a:2a:77:79:34:38:b8:e5:2e:15:ea:07:
                    3b:c0:d5:19:e8:a2:e7:cb:d3:4a:25:d2:c8:33:da:
                    37:92:cf:43:18:dd:13:48:48:3d:4b:ac:63:19:24:
                    2e:90:e9:37:7e:14:7c:3f:ab:ab:a2:cc:95:ed:d7:
                    59:ab:05:91:75:03:67:78:ae:5f:6a:0b:f8:17:ee:
                    e6:a0:0d:0f:2b:e7:8a:ec:c1:d3:4e:c0:99:0b:cd:
                    47:dd:9e:84:60:92:d7:49:3d:7e:73:f6:61:b4:c1:
                    0f:b4:a2:f8:8e:ad:9f:84:e7:6a:0d:ce:c2:71:56:
                    e6:a2:6c:42:22:d1:63:0e:91:15:df:29:6f:b8:5f:
                    97:06:cf:1c:b1:b3:fa:a4:0b:26:96:70:63:9f:e5:
                    93:aa:5b:01:14:8e:0d:d4:d9:d0:a9:c9:bf:82:97:
                    2f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35348

    Signature Algorithm: sha256WithRSAEncryption
         17:71:b3:f3:3d:54:b4:26:3d:4e:14:05:f2:15:5e:49:f3:4c:
         4a:f8:5f:58:a4:6f:46:24:35:6e:31:59:c7:0d:a8:ad:6d:93:
         d8:11:b5:7e:de:c2:14:c5:cd:c0:4a:e3:c5:8b:c6:b8:d2:5b:
         30:87:ce:95:6a:70:08:9a:4c:87:6f:ec:24:72:d9:31:5a:53:
         e3:f4:5c:10:26:53:fc:7a:6b:c4:d8:ce:10:f1:4f:5d:12:0d:
         33:11:bc:5e:d9:31:77:6e:2f:fb:ed:e2:04:c3:1f:c9:41:d7:
         82:9d:be:db:8d:1b:12:fa:79:94:57:be:4a:c8:bf:a7:d7:f6:
         e3:05:db:4d:e9:c0:7c:fc:b6:7a:80:d6:d2:3a:66:18:d5:33:
         a2:08:7c:d3:00:e4:0f:c1:e3:fe:2c:c9:3a:dc:7d:aa:f3:f5:
         ee:7b:04:4c:57:5c:4f:24:36:08:28:ad:80:38:a2:a1:45:22:
         79:98:e5:af:f5:42:3e:b5:7b:01:3e:ca:38:99:0b:27:52:02:
         d3:2d:ed:65:25:3c:dc:b2:97:9a:60:67:bc:ca:4c:51:3c:e7:
         fc:70:ea:c9:9f:22:8f:51:f4:40:53:9e:42:d4:fc:4a:2b:b8:
         f0:ce:b2:90:b7:39:78:c1:9f:58:70:f6:e6:45:f9:1b:cd:0d:
         0f:aa:96:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----