Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
File:                     Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer (raw, json)
Hash identifier:          ZfVj6fTaIdikVk1ngO5QxJ+DHC+tcYG9q+/yEUoThUA=
Subject key identifier:   39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421443D0E17AE095A543589402DAAA20A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214243

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:3d:0e:17:ae:09:5a:54:35:89:40:2d:aa:a2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:de:1f:e9:79:b7:3d:81:66:38:cc:37:77:
                    d2:b5:cb:ff:bc:22:af:db:d7:59:e0:13:42:55:61:
                    51:5e:c4:55:13:95:76:d6:e1:35:8d:bf:e2:76:58:
                    0a:28:34:e7:91:e5:c4:a8:a4:44:9c:cc:d4:ce:58:
                    0f:4d:b7:e7:29:04:10:c0:ce:17:de:e7:2d:e5:2d:
                    e0:f3:33:fb:2e:a2:44:1f:8c:bd:ba:60:5f:9a:1a:
                    d0:e1:68:49:d8:5a:98:2c:8c:9b:d8:e5:3b:d0:ee:
                    34:64:b8:20:e8:f1:cf:8d:d3:5b:2b:43:ce:3f:7f:
                    b6:ed:c4:ac:0e:ca:64:dd:9a:36:71:c7:a2:01:87:
                    e4:0e:c3:05:6d:f2:6f:be:49:e2:48:bc:fd:aa:e7:
                    e1:55:89:aa:60:af:ef:96:09:e9:ce:0b:0d:e8:8c:
                    ed:09:be:e6:d6:75:d5:1c:8b:76:9e:00:bd:ec:3f:
                    49:ee:8d:90:37:3e:7f:95:94:d7:ba:be:1d:5f:fe:
                    42:77:f9:f1:66:cd:fb:94:ea:06:c8:9f:a1:d5:8c:
                    7a:12:9e:4c:06:fc:4d:19:29:a8:14:4b:d7:29:8b:
                    fe:18:7c:2f:aa:16:aa:38:89:ed:e8:70:69:b3:21:
                    a8:db:52:a3:20:a9:a3:a2:e7:03:68:9b:0f:91:a0:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214243

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:41:ce:52:8d:c2:6d:f7:d1:61:69:bb:86:19:9d:9d:8a:
         aa:6e:37:a1:6b:e0:84:f4:d5:82:70:c1:eb:c3:e8:bb:a7:4f:
         1d:0f:70:90:80:d8:69:68:9c:ab:78:ad:ad:87:7b:aa:2e:a5:
         c1:0b:25:93:c3:b6:fd:43:56:91:ee:02:fc:88:8e:02:82:c9:
         41:c7:ef:6a:8e:38:b8:6c:d7:5b:d2:b3:3c:f7:0a:6e:d2:eb:
         8e:ec:c9:12:3c:b4:0c:f9:ef:4d:be:52:bf:93:60:98:7f:a3:
         6f:14:73:69:e1:74:1a:92:1d:03:2b:1d:39:6d:9e:47:77:65:
         f9:37:af:3d:e8:fc:8a:bf:c1:2e:22:2c:52:8d:e8:1e:53:95:
         2b:26:6c:74:40:ce:c3:bb:cf:ca:55:2a:0e:ea:1e:37:87:52:
         3b:75:14:e1:df:0e:f3:64:21:94:d1:b2:63:06:5b:e7:54:c7:
         fa:11:c3:6b:6c:2e:c6:7f:30:66:99:f1:35:ab:63:b0:21:44:
         23:d3:6a:40:83:81:61:68:37:7b:8e:6c:75:8c:b3:7d:db:51:
         35:84:01:0c:45:66:da:19:06:1c:74:8c:fc:35:bc:9d:a0:7e:
         f7:26:f9:54:1c:0d:93:86:d4:cf:09:7c:92:e9:05:f1:0d:9b:
         15:99:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----