Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
File:                     ajqLdK1O1nN5ep9rd0nCI0VpedA.cer (raw, json)
Hash identifier:          nMdixj3S8KsUIphqw6Ij2HiFJJaY36IAUTGfz8EmJh8=
Subject key identifier:   6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942520AB1D48D126437A005B844B0EAF01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:2e48::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:20:ab:1d:48:d1:26:43:7a:00:5b:84:4b:0e:af:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:f1:91:c7:94:bc:44:05:05:cb:9a:55:76:
                    c5:45:ea:e0:52:56:a8:84:84:12:c0:6c:5a:99:0c:
                    9d:22:60:73:73:8d:65:61:c1:41:d0:67:35:31:b9:
                    1b:18:f2:97:f2:57:42:e1:81:94:6a:61:97:78:68:
                    c9:8d:31:2a:20:c7:6e:e7:98:47:4f:e6:e2:16:cc:
                    82:2b:fb:63:b5:f7:83:90:79:94:ad:7f:14:c2:4b:
                    48:57:57:25:b0:cf:2c:59:6c:dd:42:22:b9:a3:71:
                    a1:ba:94:e9:eb:26:cf:c4:40:9b:eb:08:6f:e0:9d:
                    80:b7:81:e6:08:de:73:1f:ff:7e:01:d2:7c:0d:b2:
                    a9:fd:03:a9:28:0c:66:b6:89:cd:60:65:8d:32:10:
                    fb:bc:41:f0:ab:a0:df:f0:b9:a5:9a:f2:44:ad:97:
                    cc:05:8b:3e:37:b6:3c:9f:0c:5e:9c:0b:6b:5b:99:
                    86:b7:56:b0:89:67:4a:ac:d3:84:3e:67:aa:97:57:
                    c4:4b:f9:b8:63:f9:01:22:67:3c:a8:b3:d9:c4:7b:
                    e3:95:fb:62:8f:df:44:0a:27:cb:b3:7e:a6:16:c2:
                    d2:32:b3:28:25:06:56:36:fb:62:1b:c1:2e:19:c4:
                    7f:1e:f6:3b:92:f6:fd:86:fe:9b:e1:5b:13:06:40:
                    61:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2e48::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:22:b0:51:fd:af:53:6e:c6:12:66:73:95:68:48:86:b4:
         80:cc:20:e5:9d:b8:fa:90:28:ee:46:02:2c:1c:c8:61:50:fe:
         64:a2:63:97:49:85:5b:4d:51:7f:27:80:ee:5d:b5:03:6c:f5:
         d6:c4:69:05:e7:98:c2:d0:c0:a2:d5:76:1f:e8:7a:f3:00:61:
         89:b7:dc:56:24:f4:09:b2:77:79:1d:c1:aa:08:92:8f:1a:62:
         9c:7e:e3:cf:46:ca:b5:98:2f:b7:2c:47:3f:26:33:42:64:d5:
         95:61:34:49:7b:62:44:c7:e9:09:1a:a8:7c:47:8f:d8:f3:4b:
         ac:49:23:80:2f:fe:b3:3b:d2:c9:bf:11:3e:18:38:0c:9d:8a:
         0b:b9:cf:7b:37:6d:46:52:51:aa:15:e5:f4:46:df:01:51:da:
         85:91:8e:c3:fe:e3:be:a1:a3:b0:88:1b:7f:5c:c9:d1:f6:d6:
         30:24:47:0d:c2:e3:f9:78:0a:f9:a5:87:f3:7e:28:67:dc:eb:
         60:a2:3f:07:31:a7:96:6a:04:36:3a:b7:68:d0:c7:97:3c:30:
         09:a8:64:d4:d1:37:58:5c:6b:df:3d:27:a6:97:8f:0e:7d:32:
         73:ff:f3:da:07:2f:97:16:9f:15:97:c8:73:a8:0b:ef:f0:13:
         f4:13:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----