Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
File:                     GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer (raw, json)
Hash identifier:          /YAs4LrGT6YR0dsNY1jieZBWpDDH2PDUmQIsJ8/Cvn4=
Subject key identifier:   19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC3D299E24B46E49373396AE068FEF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214848

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:3d:29:9e:24:b4:6e:49:37:33:96:ae:06:8f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:c3:8d:4b:96:e5:db:b6:b7:0b:51:d8:ca:
                    ba:c8:e2:84:d4:32:10:09:c7:c6:b4:ad:eb:40:4b:
                    4b:98:df:f5:7a:55:34:b9:28:27:af:b4:ab:4e:72:
                    ae:c1:08:8c:09:0f:0d:ae:21:0f:6d:e8:90:01:ed:
                    6c:a3:41:bb:4f:5f:1d:df:8d:c1:2e:5c:7d:3d:04:
                    d7:90:f3:e3:a1:da:a3:2e:5e:96:42:7d:98:76:dc:
                    e9:55:2a:0a:3f:0a:ae:f8:5a:61:cc:04:2c:62:c4:
                    54:77:74:31:f3:46:84:a0:b4:24:19:be:19:cd:7d:
                    80:ff:70:1e:70:34:2d:8f:db:d0:bd:65:8e:95:85:
                    7a:87:d4:9e:a4:5a:f8:c7:29:2a:b4:a1:ec:2a:12:
                    d5:f1:88:38:a6:45:b8:92:63:56:63:5d:f8:1d:36:
                    ca:bd:d4:d7:79:37:43:b5:cd:9a:b0:8b:e5:d0:fc:
                    0a:3a:a5:2f:11:99:cf:d3:b6:db:fb:81:a5:db:9f:
                    61:eb:0f:cc:84:b0:6d:dd:f1:52:92:0e:50:b9:c2:
                    cd:d2:08:8f:b0:26:35:d7:31:2f:ee:08:1f:20:0c:
                    67:a5:15:11:ca:3b:20:73:62:77:b0:37:c6:dc:4d:
                    71:6f:6d:ab:f3:5a:f2:05:50:74:65:93:b6:b0:64:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214848

    Signature Algorithm: sha256WithRSAEncryption
         06:cd:7f:67:ed:44:b7:37:e8:fe:49:33:bc:56:d9:f0:1a:85:
         b3:38:5f:47:40:fa:79:41:cb:56:08:d2:ec:f5:d3:e4:e7:b1:
         d9:b4:a3:69:78:95:93:fa:31:ec:72:fb:12:89:52:fb:0b:65:
         66:1a:c3:6c:cb:18:5b:df:6d:72:a2:8e:06:6e:a2:b4:a2:a2:
         51:46:50:c9:92:e3:f2:8e:09:0c:a4:fb:5c:65:c6:35:50:29:
         f7:44:57:fb:b4:8d:c0:cf:d9:ce:90:42:a9:53:4b:ee:4c:51:
         2c:a2:8f:a2:ce:d4:d8:d4:ea:72:20:79:0d:81:e3:4d:4a:ee:
         4c:ca:b8:a7:f9:ed:4e:d8:4b:04:a1:8c:f9:8c:de:33:bd:47:
         3d:c5:2e:28:d5:1f:d3:e9:cb:9a:35:a7:34:23:7c:33:f8:38:
         60:45:9c:cc:70:21:81:ff:85:ff:d2:35:cd:61:11:54:77:8a:
         1d:1a:08:b8:f0:9f:00:6d:70:d0:cb:f6:b2:1d:15:11:b7:74:
         34:ab:48:8b:bf:7d:1e:1a:d1:f9:70:7b:a6:1b:30:1d:d2:b1:
         61:4f:f3:5d:8a:74:84:f8:51:d8:b9:46:d3:53:de:8b:d4:dc:
         b7:05:7e:27:34:ca:b3:03:83:58:7f:62:d5:03:bb:64:34:44:
         c6:c0:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----