Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
File:                     CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer (raw, json)
Hash identifier:          HoZU9emZ81SXdJv2o5rROfDpbt363P+lPuFkUXwxf9w=
Subject key identifier:   08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B606275C5C702B063607764D45A883
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48777

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:06:27:5c:5c:70:2b:06:36:07:76:4d:45:a8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:33:9f:54:96:1c:bc:3b:e8:5c:75:49:9f:
                    70:c5:ac:4f:3a:31:a4:0f:d7:e3:10:90:8c:6a:88:
                    31:6d:a0:83:08:43:b2:22:9e:3c:d5:47:c9:43:ac:
                    b2:1c:aa:91:07:b6:f9:32:7e:0a:df:f8:1a:02:27:
                    2d:58:04:7c:6e:5e:40:5e:9c:b0:42:b5:7e:41:f2:
                    9d:cf:a2:19:a1:46:b9:64:3b:4e:d6:12:21:4b:57:
                    18:da:16:cd:02:31:53:53:65:78:d0:f2:49:8f:11:
                    1c:54:fb:16:5e:49:9d:c7:89:e3:f7:bc:c0:16:44:
                    4d:7d:c1:30:2f:10:cc:fd:d2:dd:46:bf:d2:95:52:
                    53:a5:de:7e:21:e0:be:c7:83:7d:b8:0d:e7:ac:ab:
                    8b:cc:1a:6b:9b:a5:c1:bb:64:9a:fe:69:30:eb:93:
                    89:1c:4c:45:ce:0f:84:2a:13:f6:d0:6b:e8:b7:2d:
                    cc:10:85:06:72:46:f6:2b:3c:82:ca:d8:70:ea:b2:
                    b5:e1:b4:4b:2a:d0:a7:e2:ac:7b:f3:4d:a8:55:fa:
                    4b:49:79:8a:5b:8b:fe:1e:48:05:2d:a8:18:14:c5:
                    c0:56:8f:dc:c0:35:64:ac:d1:db:f9:ef:b9:0c:22:
                    6c:0f:03:b7:34:df:4e:5e:12:fb:dd:1c:ed:5f:bb:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48777

    Signature Algorithm: sha256WithRSAEncryption
         49:aa:fa:de:a2:c2:4b:da:75:f5:87:d8:16:0e:99:11:89:c9:
         21:c9:0b:aa:df:2f:ed:54:b7:9c:7b:04:dc:ee:fe:4c:c4:74:
         47:9e:9c:f5:be:4f:a4:4e:85:05:25:b4:9c:2a:fb:f3:37:59:
         c7:c2:ed:40:f0:d0:0d:1e:61:88:61:eb:2f:78:3e:79:74:8d:
         97:9c:8b:55:27:c0:6b:4b:73:c3:03:80:df:c0:3f:12:b3:d4:
         53:da:b2:9e:8f:c0:c7:6b:26:3f:70:36:a6:1b:e0:23:ce:1f:
         fe:d8:ad:c9:2c:b2:82:17:ac:7e:93:d6:d7:6e:5f:da:7b:aa:
         33:3d:6b:32:b1:4a:6b:39:3c:63:98:35:b0:4c:1a:85:06:d1:
         43:3f:61:49:f0:6a:ec:ec:0c:43:54:8e:11:b8:fc:70:03:5a:
         af:83:ee:06:a2:e6:8e:fb:e3:9a:6e:2c:e4:a4:09:db:33:12:
         7b:2a:72:b9:a4:83:03:b6:59:3d:64:a5:bf:65:02:fc:d8:34:
         87:1e:64:01:68:f4:f9:1e:6f:c3:81:35:a0:33:a3:05:a4:a7:
         85:b0:f7:41:5f:91:aa:9f:99:28:3b:1c:5c:e5:6e:f9:9e:55:
         69:50:05:28:09:e9:ba:6c:21:2f:ba:b0:82:86:fb:65:d5:43:
         d8:07:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----