Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
File:                     SpR3QFKci4QPf4kzCXmshyyj-rg.cer (raw, json)
Hash identifier:          Me53Ns5rBR5Zx8i++P6DmJATUdGF7phyFps2uiYx2WA=
Subject key identifier:   4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019512BFC527171DD7E686E620A9AA8965FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Feb 2025 07:11:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214097

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:bf:c5:27:17:1d:d7:e6:86:e6:20:a9:aa:89:65:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 17 07:11:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4a947740529c8b840f7f89330979ac872ca3fab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:32:60:49:50:d3:f9:a4:a9:da:96:6b:74:
                    1f:bf:d6:2e:ef:1f:e9:57:1a:76:cd:e9:43:c9:df:
                    db:68:85:37:ea:68:f7:f7:bc:09:6f:fe:0d:f3:5c:
                    3d:7e:12:fb:a1:8d:cb:d3:7a:c4:df:97:c5:39:ff:
                    d0:69:f3:69:03:e8:2a:95:85:c8:5a:1c:39:d3:7b:
                    88:40:47:f9:88:e1:75:5c:64:65:aa:b0:7c:d9:ff:
                    bb:d9:07:f8:4b:3e:3d:42:25:47:a1:d7:17:91:b2:
                    99:e9:a9:98:2d:7d:33:3e:9a:87:9f:98:bf:bd:7e:
                    2f:34:b7:0c:84:7d:c3:76:05:12:74:1a:7c:22:37:
                    45:03:55:cb:24:d2:2b:84:5b:88:8b:d9:2f:5a:e4:
                    bf:75:3b:c6:7c:10:b4:c1:36:dc:bb:72:eb:d3:d7:
                    a1:5f:0c:1b:61:fc:49:a1:80:c8:83:3c:f6:58:b7:
                    d8:44:a6:ef:aa:68:4b:55:be:9c:9f:59:8b:c8:85:
                    04:7c:1a:f6:79:55:c9:46:10:71:90:17:12:5e:5a:
                    a7:0a:af:f2:4a:a8:9c:a2:ac:66:2c:23:de:dd:67:
                    e4:0d:b1:e0:9f:21:7a:ac:82:cb:97:31:5a:80:92:
                    67:08:38:b6:29:37:0e:fc:86:45:6b:d6:e2:57:80:
                    f7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214097

    Signature Algorithm: sha256WithRSAEncryption
         48:55:fa:34:18:c1:d7:9b:b7:d8:75:2f:5a:72:e3:f0:69:e3:
         d9:50:e1:21:24:c1:06:27:ea:8d:9a:77:c1:79:44:cf:d3:32:
         cb:f2:48:78:9a:ba:7e:73:f7:25:62:c3:32:73:44:11:62:33:
         24:d8:b1:db:65:e9:2d:a0:88:46:20:51:c3:4a:72:0e:8d:ae:
         f5:59:29:0c:3b:63:0d:ff:0c:98:85:0a:7b:ec:65:33:a7:6a:
         e3:76:91:d7:c5:4b:96:a1:bf:fc:de:d7:ef:d1:f7:d5:63:75:
         ac:b3:ba:8b:a5:50:51:07:a0:08:61:c9:15:a7:b5:01:8c:18:
         f1:95:9a:d8:60:74:84:c2:42:84:b5:d6:90:61:77:c7:3b:9f:
         b6:82:93:86:f4:6c:56:6a:8b:b1:33:22:a1:92:b6:17:5f:33:
         38:09:f7:98:74:ce:0c:06:24:c9:e3:9b:4d:7a:e6:c7:fe:0d:
         68:f5:e1:a7:60:c3:9a:2e:0d:f4:03:91:bc:f6:fe:55:94:71:
         4e:af:85:0e:0d:ac:67:fe:28:97:09:b5:d0:03:d6:7e:30:2c:
         0b:d9:c2:13:4e:ec:d2:b4:ee:cc:3a:02:ef:31:4b:04:ed:fa:
         20:21:86:8f:3a:ff:7c:5d:32:3a:cb:77:37:d0:e5:58:d4:63:
         94:81:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----