Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
File:                     E7ur4fopzNr8vU-Utcfk0NH4lH0.cer (raw, json)
Hash identifier:          DR0QcAKpsb6XBC2uvdtjzttJfovFW4ODDlW8ET0QxFA=
Subject key identifier:   13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01954DBDFBB4A730555231D5B313DB1CECC7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 18:07:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212528

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:4d:bd:fb:b4:a7:30:55:52:31:d5:b3:13:db:1c:ec:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 28 18:07:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:4b:e8:44:66:f8:d5:eb:f7:0f:16:b1:b0:
                    e2:0d:7d:51:98:42:71:56:4f:62:06:a8:65:de:bf:
                    09:89:ea:db:1c:86:1c:fe:b1:97:ee:af:b0:19:1c:
                    2e:cd:87:6c:46:8b:7a:14:85:44:2a:8a:4f:a5:c4:
                    29:29:b2:58:18:03:a4:ea:90:3f:45:f2:24:80:ec:
                    56:87:cf:b7:54:58:16:49:09:60:ee:00:a5:ff:51:
                    7e:ce:54:38:d1:08:4e:db:a7:72:66:ff:88:1c:71:
                    23:83:9a:f7:35:f8:b6:0d:d7:43:60:d4:c4:1d:e1:
                    da:ad:fa:ed:79:af:5c:8f:ee:ac:05:1d:fd:b4:94:
                    5f:87:4d:ff:48:bb:74:b0:51:9b:50:11:b9:02:52:
                    d2:5e:5d:dc:0c:7f:7a:12:de:56:53:a2:83:07:4f:
                    6a:94:29:55:fd:4c:11:1c:70:4b:05:82:7f:33:2f:
                    05:d1:fd:19:99:ca:fe:38:c0:cc:d5:63:16:40:37:
                    ee:1c:b4:b3:23:01:bd:f3:25:45:c5:43:8a:83:65:
                    9d:62:94:a5:39:4f:fd:bf:53:c0:15:a9:d7:ab:c4:
                    10:d3:23:cc:7a:19:8e:32:44:42:4b:af:3d:9f:6c:
                    bc:bd:e9:cd:98:17:78:4a:f0:76:6e:90:fb:7f:e0:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212528

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:94:07:f5:3a:5c:0c:57:50:12:21:b9:35:da:30:62:b3:
         36:17:a2:de:30:d6:59:0d:d9:3f:a4:0d:77:66:bc:74:6a:43:
         50:f6:d5:ac:d4:f4:b2:b4:89:5b:2d:bd:d4:ca:d5:1c:2b:b1:
         f9:b3:be:52:46:c8:00:25:b2:56:b5:97:e4:5d:45:7a:e3:dc:
         b7:36:2c:90:8c:d7:d5:49:e3:70:3c:00:4a:09:17:08:ba:b4:
         ec:c6:48:8e:c6:61:df:cd:52:7a:62:70:19:e9:b5:29:90:a0:
         f5:49:27:4b:f4:56:22:e3:6e:bd:67:0b:5a:3b:2e:a8:2f:6c:
         e9:1a:c6:20:7a:8c:e0:41:89:83:4b:03:1b:b6:86:b5:b9:09:
         5c:92:2e:01:03:58:b6:c6:2d:2b:54:e4:f3:67:1b:4f:a1:6b:
         8a:7e:b9:60:15:04:c2:82:b3:78:c0:e1:e4:47:d9:dc:40:2e:
         8a:f7:c9:cf:5c:e9:76:69:2e:d5:ff:d0:fd:72:c0:e3:7b:67:
         73:fc:23:10:a6:dc:ac:9d:7f:25:08:e3:d1:d2:0b:d3:20:a9:
         ac:eb:2a:ba:82:8b:21:48:94:e0:95:06:ff:4c:3f:1e:31:75:
         7f:6b:fa:4e:b3:e7:21:23:c2:37:d2:85:b9:7f:69:74:4c:b1:
         33:44:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----