Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
File:                     DdL44N6hOH2vkDXSzfTrjJOticw.cer (raw, json)
Hash identifier:          sH9WQaZRd1oBGpJoVIUToA4/ZCQHTrBG8Ju+mpytdIs=
Subject key identifier:   0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206848F74BE3BC132E111F37F28F1776
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 13209
                          IP: 91.217.82.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:48:f7:4b:e3:bc:13:2e:11:1f:37:f2:8f:17:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:10:96:d6:dc:df:6a:a9:f8:6a:c7:dc:bc:
                    37:3a:69:9c:85:39:ef:ec:7b:db:cf:e7:f3:b1:40:
                    e7:97:78:2b:fd:4d:f4:e6:4d:38:94:f6:d3:75:8c:
                    d1:59:5a:eb:66:b6:12:02:72:19:94:2d:6b:0b:6e:
                    f9:18:aa:1d:e4:ca:e2:ee:96:2a:57:45:62:f0:67:
                    6d:27:c9:2d:72:48:1e:47:43:a1:f9:40:aa:d9:cd:
                    57:90:1a:63:a6:7e:aa:37:05:ef:c0:93:8e:a1:5f:
                    51:2f:0e:fa:ce:46:07:54:ce:fd:59:f7:28:73:ac:
                    82:37:d4:10:33:bb:1c:4c:a8:3f:50:e3:f4:23:91:
                    ab:9b:cc:9d:f8:42:6d:6d:c9:35:fb:5b:71:05:96:
                    78:a2:63:e9:a5:ad:81:13:0f:9f:7c:9d:df:0d:b0:
                    5a:80:dd:ff:21:8e:2a:24:fa:de:6a:a1:e9:8b:74:
                    ac:b7:59:ff:75:79:6a:67:58:53:cf:06:f6:d7:ec:
                    f0:a1:28:35:e9:b7:a8:db:34:25:42:bd:6a:70:81:
                    c4:79:a3:46:39:c1:67:56:05:a3:2c:71:36:25:86:
                    dc:c2:67:9b:84:88:28:49:5f:72:af:83:d8:19:40:
                    73:7d:d1:4f:fc:49:9f:6e:79:b4:4f:c6:11:8d:46:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.82.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13209

    Signature Algorithm: sha256WithRSAEncryption
         83:97:8c:c2:0f:3d:61:3f:33:0b:0e:dc:44:20:3a:fc:da:01:
         18:c7:f2:9d:46:0f:7d:de:5f:cf:d0:3d:72:e1:a1:98:19:0d:
         1a:b2:6c:9d:a1:ed:d0:8a:97:b7:b5:7c:49:a3:1f:c7:11:e1:
         d9:4b:c4:de:bd:10:cf:d0:98:7a:d9:88:98:6c:69:8f:1e:1b:
         a8:85:11:6d:c8:4b:50:45:3e:3a:0e:7d:3c:3c:62:2a:86:47:
         0a:c2:03:c0:c7:5d:65:87:b3:3c:40:3e:e1:7b:95:ce:2c:f3:
         ad:01:c7:df:93:65:c8:fb:16:2a:fa:a8:5e:78:42:01:1c:69:
         7b:a5:1c:9b:e0:28:54:0c:7b:4e:97:7f:c2:a0:cb:44:f8:d0:
         a9:4c:2d:61:65:e0:e5:5c:fd:30:24:60:88:88:10:fd:d5:4c:
         47:4a:2f:ba:94:eb:ad:86:7a:86:d0:51:0e:ce:41:23:0a:55:
         c4:b6:b9:18:5c:7c:dc:38:af:e5:ad:1b:d6:17:89:09:e9:ee:
         50:a0:3a:df:0f:3f:93:f0:50:bd:ce:16:8e:64:d9:71:a1:44:
         7e:07:67:b6:32:f2:11:1c:c9:14:08:75:61:f6:9d:57:76:19:
         52:e0:9c:24:0a:07:e2:b5:8f:3e:27:90:58:12:cd:1e:9d:44:
         a4:8b:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----