Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
File:                     T4dGzo6jgv8gOyinnvhBzrczyXs.cer (raw, json)
Hash identifier:          6Id7dQ9mAHTUmi522Wj5kl5YO4Pg+wS2NwvzfUyc+PE=
Subject key identifier:   4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195BE3F442508B181139F9ED69A7DC7C962
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 22 Mar 2025 14:26:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211860

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:be:3f:44:25:08:b1:81:13:9f:9e:d6:9a:7d:c7:c9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 22 14:26:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:77:6f:8f:96:e9:89:bc:56:70:1c:81:6b:
                    01:2d:10:5d:2e:21:7d:17:be:d7:db:42:4c:97:ad:
                    e1:74:4c:83:1f:ba:a0:50:27:60:d0:9d:f3:21:60:
                    d4:79:a4:8f:fe:32:05:13:1c:a0:28:bc:ff:99:71:
                    58:13:a9:b7:b7:69:e1:86:35:81:a5:2f:00:23:dc:
                    0a:b5:c3:fd:0d:ca:66:1b:ba:39:c9:df:7e:35:ea:
                    b0:05:ea:77:aa:f3:0f:f8:f2:64:62:8f:d8:f8:fc:
                    d4:19:57:84:42:4b:1c:97:fe:fc:de:f3:92:b5:44:
                    50:28:c8:9e:9b:04:76:70:e2:e7:b4:3a:ae:c6:42:
                    44:ed:6a:ea:b9:9b:8b:65:c2:69:16:f1:65:85:e3:
                    fa:f8:46:90:ec:44:a9:19:80:ec:3b:fc:c4:3d:18:
                    67:59:f3:4d:0d:6a:5f:fd:af:a0:42:cb:04:7c:a1:
                    b6:9b:ef:d3:52:48:98:b2:f4:4d:06:bb:75:b6:c6:
                    80:ca:51:d5:35:1a:9f:24:17:b6:b0:63:ba:2d:3b:
                    b4:4a:6e:d5:ee:ff:9b:22:10:3e:e5:80:e5:97:09:
                    1a:42:88:d5:7d:c6:42:c1:cc:bb:37:a4:b5:a0:fe:
                    ef:ba:0d:fb:e3:bb:9a:1f:ef:cc:1f:2c:93:b7:63:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211860

    Signature Algorithm: sha256WithRSAEncryption
         2c:56:13:23:a0:4c:40:db:07:7f:21:cc:5b:4f:11:cc:5c:93:
         4a:42:9f:88:d1:1b:85:77:a3:e5:50:2c:11:1e:23:c2:19:47:
         89:c1:4a:a2:18:7a:91:d3:5f:d0:89:6c:f8:e1:64:2e:81:cb:
         35:d0:53:68:47:41:da:9c:68:9d:f4:29:9b:96:ca:c6:14:b0:
         8a:09:13:9f:df:e4:35:4d:60:95:25:64:d2:a8:19:66:a6:6a:
         01:18:c4:75:81:6f:2d:75:4c:97:fd:3a:48:e4:7a:a9:31:08:
         e1:a8:15:be:78:28:bc:93:39:7c:ab:3c:24:75:a6:aa:02:8e:
         d1:fb:0a:bd:86:8e:c1:00:f0:f4:fc:1c:4b:94:02:f3:86:4f:
         0f:d5:f6:ed:97:b9:cc:b6:9b:f9:2a:52:69:9c:2a:55:a8:00:
         49:c5:ae:2a:b3:dd:33:23:bb:7e:66:d1:98:1a:36:92:ee:d3:
         a8:92:66:e3:61:d4:3f:a4:d3:63:1c:cd:14:ac:75:8c:34:b2:
         43:b4:58:ab:44:3d:69:fa:7b:94:5a:d7:dc:6d:72:12:28:fc:
         01:59:41:7b:25:dc:1f:98:33:45:c8:56:ee:16:5b:ba:18:f3:
         6a:b4:0e:b6:17:85:80:6a:fd:23:b6:cd:5e:a0:f1:a1:f4:54:
         f8:aa:07:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----