Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
File:                     WrJabDkrjmejrSH2D9MxHWt_Hlw.cer (raw, json)
Hash identifier:          PlhWAUgqdttPnDR4bY5KVQlAAeq0UolX2SJmy/O9k68=
Subject key identifier:   5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B9AF0F334B98F2CB3F9DE3216D217
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34799

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:9a:f0:f3:34:b9:8f:2c:b3:f9:de:32:16:d2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:3f:14:38:62:fd:04:7d:fa:44:f9:ab:1e:
                    ac:fd:a0:1e:d2:ab:81:88:2f:26:a4:80:50:f7:33:
                    ad:28:94:45:60:1f:17:ac:e6:39:11:80:dd:fc:92:
                    b0:5f:17:9b:c5:d4:a6:5b:cb:cd:ce:70:ea:1f:55:
                    b2:af:64:35:55:8e:fb:76:b5:0e:7a:4e:74:fe:f9:
                    c0:10:e7:6c:ef:e7:9e:a8:b8:8d:01:b0:75:60:23:
                    e4:60:79:6a:77:f5:29:b9:da:c2:38:66:7a:57:26:
                    b6:89:8f:97:6d:86:05:fc:23:20:04:51:b7:08:5e:
                    a6:2d:ec:41:49:7d:35:33:bb:94:b9:d2:8d:fc:4e:
                    91:c4:6c:22:db:ca:1e:01:2c:6a:d9:fc:58:1a:50:
                    63:db:1e:8d:74:8c:45:32:89:c4:b5:cb:ca:21:12:
                    ee:ff:9a:2a:1e:a4:bf:eb:7f:05:b9:d9:ac:bd:c5:
                    78:36:ff:c2:dd:c4:98:93:27:ab:d6:13:14:75:46:
                    f4:5b:5d:78:d0:d1:11:a4:1a:0d:48:73:f8:ec:f2:
                    2f:0c:78:1f:34:62:ed:33:4d:3b:76:5b:c7:d6:96:
                    0c:96:be:ec:a2:30:37:ce:c7:3d:b4:a6:f1:0d:36:
                    7d:5e:62:4a:dd:6b:3f:ca:28:c2:d0:da:f5:ee:88:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34799

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:69:47:7b:79:87:72:39:dc:0c:e4:98:b6:ab:f4:ee:fd:
         a9:45:d5:3f:e4:18:71:d7:39:23:56:7f:e2:70:e2:04:f6:04:
         60:04:80:78:b0:5d:f5:1d:c5:ee:0f:41:bf:ae:6a:33:11:1b:
         c2:c3:af:b0:69:6f:f3:77:2c:0e:e3:9c:06:ff:83:b1:df:9d:
         25:28:a5:3d:57:ac:a7:ba:39:48:af:ff:7c:80:db:b5:e9:60:
         8a:a0:78:69:c3:71:50:ee:22:9d:72:eb:47:c2:26:22:39:e6:
         07:4a:65:39:71:11:f5:e7:5d:ac:b6:16:64:a2:b4:11:41:59:
         06:7c:67:ca:95:77:77:1e:66:1e:21:7e:2b:46:61:58:18:9f:
         f3:13:b0:33:80:a9:34:6c:f3:13:06:a8:91:dd:f6:28:66:26:
         96:42:12:ea:6e:4f:39:5f:38:cd:0a:54:9a:df:f8:61:28:74:
         76:04:69:02:34:f9:81:dd:0b:f2:0c:a5:1e:e2:01:5c:34:3d:
         a5:01:3a:44:e9:b0:23:42:e9:0f:03:f5:77:d7:0c:4c:ca:e0:
         8f:e0:8a:8f:55:6b:82:d2:79:49:17:ba:e4:9e:97:a1:ca:d0:
         3d:6e:8b:cd:5b:39:2c:1b:10:c0:ca:a6:2f:d5:95:57:c5:f0:
         53:54:25:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----