Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
File:                     UEwHY-3Lox64nwmD3djdGIkYwu4.cer (raw, json)
Hash identifier:          t8EVBnnxGiy5zQvVS5xAjpficFb+oI6cDO+oBxEoZ28=
Subject key identifier:   50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942368E7816701BEA025E95507E39EFF48
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199347

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:e7:81:67:01:be:a0:25:e9:55:07:e3:9e:ff:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:e1:aa:7d:de:45:1d:26:b4:fe:15:74:4f:
                    3b:fd:a7:d5:36:cc:66:cd:5f:98:0c:46:30:ba:23:
                    46:95:28:e3:77:6f:82:bc:18:ac:2e:86:4d:56:1e:
                    2d:17:d1:0e:8a:5a:90:b8:0f:ea:bc:b3:3b:9a:2b:
                    75:33:23:17:7e:e5:61:05:17:4e:da:42:bb:b8:66:
                    bd:b8:18:50:53:6c:af:f1:e0:90:81:07:0a:f0:ef:
                    53:2b:82:e2:47:c7:1f:90:7e:9e:0d:30:a2:04:f2:
                    dd:95:a6:95:6b:3e:3d:4f:41:c4:44:d5:1f:20:df:
                    45:62:e5:63:f9:58:a4:f8:19:8f:b6:e8:52:ee:b5:
                    bb:57:f9:41:25:6f:2c:4e:73:9e:0b:7c:12:11:84:
                    a6:c0:b4:3d:97:fd:df:67:e2:ab:79:5c:c6:fc:81:
                    fc:85:06:d8:0f:5a:18:3f:07:cd:5d:9c:b6:63:9c:
                    7d:86:80:cb:17:e0:1e:0a:55:2f:0b:3d:9e:1f:7a:
                    8e:55:2a:8c:3c:5d:9f:90:4e:88:70:00:cf:63:ef:
                    e3:ac:7b:db:70:e6:9c:1d:cc:f2:a4:65:f6:90:7e:
                    4d:e5:d5:71:a4:cc:e6:ec:bf:b9:a6:d1:aa:f5:eb:
                    ba:82:2c:71:6f:6b:16:3b:df:20:e8:0a:81:a1:f9:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199347

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:7c:b2:d4:a7:75:40:2e:f1:80:21:03:51:4b:bb:c0:7d:
         b2:75:35:c5:2a:af:2b:ef:ed:99:22:d7:71:6d:45:90:a5:ac:
         ba:65:21:50:61:83:a7:56:eb:a2:86:a6:3f:c0:18:a3:10:ba:
         86:3e:df:48:42:bd:76:0a:c1:7e:e0:19:d6:cd:af:bb:39:4c:
         d8:28:8c:6c:4c:ab:4a:ad:4c:66:62:85:f5:35:c4:06:be:e3:
         b9:f3:54:71:4f:01:43:5b:af:94:df:99:96:ac:6f:b4:c0:4b:
         b9:f4:4b:24:90:c4:c1:ee:fb:38:98:0c:27:dc:c1:50:6c:75:
         ff:85:60:27:84:f6:af:0a:6a:b0:70:66:c6:a6:63:5c:03:3a:
         f9:57:de:e3:cb:20:f6:5d:07:57:05:37:60:e1:1c:15:f6:60:
         dc:ba:af:06:90:11:6b:d7:04:f7:14:be:77:cd:45:89:67:7e:
         16:4f:16:ac:ab:6a:9b:aa:1d:06:61:4d:db:f7:9d:6e:b9:ac:
         09:0d:0a:39:5a:85:f5:c9:fc:d1:e4:72:d5:4a:63:52:5f:0c:
         d0:81:ca:ec:cd:2c:db:c7:66:9a:d8:e5:1e:af:85:f4:5f:25:
         6b:d1:42:15:c0:bf:ad:e1:97:3e:98:eb:dd:42:1f:f3:88:1f:
         7a:c7:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----