Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
File:                     MobxwgXuMYfirBpKW8BJ80Sf9mc.cer (raw, json)
Hash identifier:          Z6p6UEXCFyHPvS8f3DZM/DmAJuqhmlnIWSkEbZVUcV0=
Subject key identifier:   32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B2876FA3432E1BA246D64FD369A105
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201948

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:87:6f:a3:43:2e:1b:a2:46:d6:4f:d3:69:a1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:db:ff:f3:57:05:8c:8f:fe:2e:61:d7:ce:
                    74:d1:7c:55:54:8b:4f:ff:d0:a6:f5:d5:1a:4d:dc:
                    58:c4:75:61:8a:30:ed:de:35:b2:b1:0e:60:b4:f8:
                    96:93:61:5d:ae:db:04:d6:ca:ff:37:e8:6b:16:96:
                    11:ab:c3:ad:ba:c5:1b:15:96:4d:c1:16:51:23:a8:
                    9f:68:8a:2d:cb:27:b1:2f:ac:69:ae:32:ac:76:24:
                    41:b0:56:2f:db:43:c1:b9:61:7f:1e:97:b5:fd:fd:
                    06:8e:58:05:2d:3c:5e:c1:ee:5d:aa:cc:00:f9:35:
                    7a:48:9f:04:3a:f1:f7:e1:42:40:a8:6c:57:94:ca:
                    81:43:82:25:5c:55:11:25:67:65:ac:53:a9:0c:8d:
                    8b:42:93:5d:c9:5c:b1:0d:c3:b9:42:d5:4f:86:b2:
                    99:db:70:e9:c1:42:0b:32:3b:35:57:4f:8c:bb:69:
                    5a:f5:71:6e:b2:b7:61:4e:ef:23:58:b7:36:13:e7:
                    f7:ce:3b:61:3c:5d:f9:10:21:5d:b6:95:33:ed:a1:
                    3e:7b:66:58:c5:d0:34:bd:2c:c5:2a:26:0c:a7:d9:
                    e2:7b:bd:30:db:8a:af:4d:7b:a0:6c:3e:5e:0c:41:
                    cc:9e:ea:5a:1b:2b:a7:35:87:c0:32:5b:cb:0a:f0:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201948

    Signature Algorithm: sha256WithRSAEncryption
         8d:7d:59:88:51:f2:c7:dc:1c:01:f8:80:b2:1d:b7:b9:cd:39:
         7f:cb:e1:ee:36:be:72:1c:a3:28:dc:7a:5a:f4:f6:51:63:ed:
         b4:b1:26:dd:70:e4:b3:1b:62:66:e3:87:91:11:60:df:92:34:
         7e:73:1c:76:17:35:d0:26:9e:d0:bf:a9:27:26:ca:83:76:b0:
         0d:d6:5e:b2:09:99:ee:5f:4e:3d:7e:ee:91:f8:96:da:59:10:
         d4:61:e9:28:03:ce:19:53:00:46:27:3b:d3:e2:71:1a:23:24:
         23:9f:d6:7f:83:a9:24:af:5c:61:c4:71:33:77:be:ad:ca:7c:
         c3:e4:ff:a1:4b:55:e4:58:ef:67:c5:ea:8c:31:36:4e:97:23:
         78:76:93:3c:9e:ce:1b:3d:b7:48:30:28:2a:90:e8:e8:85:9a:
         c4:23:5a:ae:b4:67:aa:4c:e1:63:45:8d:11:de:24:6a:0a:3c:
         dd:e5:ea:f1:bd:2d:cb:1a:8d:75:6a:3f:86:9f:c1:3a:d2:1e:
         ec:38:90:aa:66:20:46:08:d1:fb:71:98:2a:fb:f8:06:e9:94:
         37:7d:2e:6c:1a:b1:1a:e1:73:0f:52:75:f7:eb:7f:41:06:0a:
         60:fc:18:0a:77:5a:37:c1:73:7a:1c:00:96:2d:c2:23:b3:20:
         60:1b:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----