Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
File:                     JUdfWtnsz_acNaYw3P8sWmY_188.cer (raw, json)
Hash identifier:          6/e1M4S+aaJ4OlceqkP3AJYsYeVuYQHkfST6SUNTzi0=
Subject key identifier:   25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01960066403949209BA83A4C869775616C09
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 04 Apr 2025 10:43:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 61067
                          IP: 2a04:1480::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:00:66:40:39:49:20:9b:a8:3a:4c:86:97:75:61:6c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  4 10:43:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:a0:39:08:7c:ed:86:41:3c:d9:13:72:01:
                    9b:0c:6b:b2:78:31:f6:14:a2:4a:20:85:76:5a:f3:
                    ed:a8:2e:d7:b0:ca:6d:c7:4e:93:ca:17:83:3a:98:
                    53:e8:d2:76:36:36:8f:43:27:08:ea:93:df:35:19:
                    c5:fa:e1:c9:a7:e4:e6:71:46:e2:bb:b5:01:94:c0:
                    ce:6a:01:81:66:53:9e:23:29:f6:94:16:67:13:e6:
                    e9:e4:68:a4:f3:e5:31:80:2c:77:a1:3a:3c:bf:b2:
                    33:72:d5:a6:52:c2:c0:de:4e:cd:3d:37:1c:90:55:
                    dd:d9:a4:35:ed:b8:6e:80:20:75:e7:ed:6c:ab:66:
                    93:f6:a1:fb:70:a6:8f:74:0a:8f:b3:fa:f6:2f:d2:
                    b3:ba:0c:77:f0:dc:86:74:ec:1d:52:a0:63:81:ea:
                    57:a7:4e:1a:29:73:fb:6f:f6:0d:fa:3f:c3:c1:12:
                    94:ef:2b:03:b1:40:57:b4:05:12:04:b4:41:07:78:
                    3a:d0:c4:e1:55:f5:1e:41:2a:0b:e7:16:05:19:20:
                    ed:36:6d:22:d0:9b:25:01:1d:ae:59:21:e2:42:0b:
                    fc:b2:ad:0c:1b:1a:60:c9:d6:c4:2d:9f:e4:54:77:
                    45:65:ff:2c:47:35:55:18:af:5d:09:08:1c:7a:ca:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:1480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61067

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:16:6c:22:e2:6a:6f:d5:bb:92:60:cd:52:aa:10:2d:cf:
         d1:c5:8f:de:1c:2a:1c:92:7c:16:cf:b7:f7:03:f2:5a:d4:98:
         78:d2:fc:42:f5:5b:f8:73:f9:98:a8:d9:3d:db:f9:b5:38:f3:
         9c:d3:99:8d:20:c5:ff:bf:f7:46:90:49:18:94:1b:38:e0:b4:
         98:57:94:63:9d:d7:1d:bb:f4:1f:c2:90:0a:2c:27:72:58:07:
         81:77:56:c3:d4:e5:0f:ee:19:09:9b:61:65:90:b8:e8:02:2e:
         52:95:13:be:36:7b:a5:40:69:7e:bb:0c:7b:03:2f:56:e3:12:
         b3:8c:7f:91:6a:44:5b:16:87:85:c5:ec:ae:a0:d6:34:45:ab:
         6e:3c:e1:a1:b7:40:9c:a9:81:00:c7:ae:d6:91:23:4d:7b:2b:
         d7:52:10:e2:82:b0:34:a9:4d:b0:8d:84:c2:17:9b:01:fe:bd:
         c5:c0:a0:2e:c2:4d:c0:8e:b0:8b:43:2f:dd:80:e1:ad:cb:bd:
         37:43:73:e9:d3:1f:97:b3:c2:1a:5a:0c:2b:2d:e3:5f:5d:cf:
         63:75:ca:ad:a6:d9:a5:57:26:13:d2:c3:15:5e:c0:21:85:9d:
         13:34:7a:e1:bb:f6:7e:0d:7d:04:61:49:6b:d4:bc:31:f1:01:
         c1:18:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----