Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
File:                     FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer (raw, json)
Hash identifier:          6D2md9N99D8ISb17I1ogvx37PPHuDU5LodJOij9HKbg=
Subject key identifier:   14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1D23C075E53570ED16632257EC9B2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34881
                          IP: 91.237.146.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:d2:3c:07:5e:53:57:0e:d1:66:32:25:7e:c9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ed:2e:2e:e0:88:e7:d8:08:bf:21:82:e3:6e:
                    cb:5f:be:3e:df:f7:a4:c5:f3:a8:40:5a:c1:d3:31:
                    33:12:5f:33:8e:3d:f3:1b:4a:e0:dd:83:c2:48:14:
                    f4:e8:24:b1:4e:44:7b:1a:51:92:b1:13:88:05:1b:
                    66:8f:c4:56:0c:33:9a:c7:ab:2d:09:df:67:a6:08:
                    4e:7d:c9:a8:a1:7e:fe:5a:88:bd:c1:a2:5d:9a:f3:
                    bb:57:86:76:93:45:e8:49:36:90:3b:77:22:0d:32:
                    52:64:ac:f0:01:8f:55:a5:a9:df:f9:02:93:2f:e9:
                    5c:13:03:bf:1d:f1:d6:a3:d2:02:66:90:af:71:fa:
                    5c:da:25:c2:c8:6c:de:fe:97:ac:db:c2:38:62:08:
                    fd:a1:6c:a4:78:85:7a:d2:4c:72:0e:ff:a3:5d:77:
                    eb:2c:d0:d5:80:3c:77:44:b4:f7:db:2d:24:cd:13:
                    1a:fd:5c:db:5a:6b:6d:63:10:bf:32:7b:d3:ff:79:
                    87:94:3c:66:ca:4b:ae:70:67:41:bd:43:dc:47:bc:
                    d3:80:ed:5d:d0:87:ac:bd:ee:4d:0b:77:13:47:72:
                    cf:80:df:a6:18:98:c7:de:f5:53:f0:db:03:2a:a9:
                    7c:69:a2:d6:01:c0:40:17:e7:e5:7a:04:89:a2:c1:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.146.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34881

    Signature Algorithm: sha256WithRSAEncryption
         38:db:c6:ea:ff:fb:c4:ae:01:c6:f7:de:4f:aa:4e:a7:c2:31:
         5c:31:09:c9:bc:99:ae:e3:11:6e:0c:34:86:1a:95:f1:c7:70:
         4b:78:59:66:ba:d2:6d:24:d9:c5:a2:a5:1a:a7:48:b1:27:38:
         fd:2e:7c:87:2f:10:5a:33:67:94:18:6d:9c:f2:2e:62:3e:d2:
         bd:d8:88:61:8c:c3:b0:65:42:1d:0d:46:90:93:74:bc:28:49:
         84:53:5d:45:38:b8:47:4a:ea:b2:83:06:30:8e:2e:c8:f8:d3:
         c8:35:fd:be:8e:38:8d:a1:2c:af:75:e3:4f:5f:60:d2:79:1f:
         ec:70:b3:95:78:ca:6d:2a:a4:36:09:71:c4:e3:01:60:21:0f:
         ce:2b:75:34:79:a2:f3:7a:58:ce:bc:06:e4:e7:c9:6c:04:de:
         e4:02:a8:73:a4:4c:a0:d3:f3:6d:56:fc:2b:4f:d8:c7:bb:d1:
         18:37:09:62:37:d8:ec:20:99:b6:1e:a7:d2:50:1c:fa:82:f5:
         fb:b5:87:57:93:2b:86:51:ec:e4:80:e6:aa:aa:e7:4b:a3:e6:
         f1:6f:3f:39:5c:0a:a3:68:54:74:c2:a5:45:ab:d6:f6:18:f0:
         ff:53:16:d0:0f:83:32:d4:ba:27:1e:e9:35:38:86:34:e1:91:
         f6:b3:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----