Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
File:                     eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer (raw, json)
Hash identifier:          91K/2Bk08CYTcO3KDWgomP0x2Ux2EVu8nkZS8HfyB58=
Subject key identifier:   78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BA2EC2E48131CB7783B3B84985736
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:e20::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:a2:ec:2e:48:13:1c:b7:78:3b:3b:84:98:57:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7870621fc0afc8ec18eef20633f6148813279976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:ad:20:c9:47:58:c9:08:b0:a6:66:66:5f:
                    1a:91:9f:f6:15:a3:be:1c:c9:e9:46:3f:99:1c:4f:
                    cf:3f:2d:13:cf:33:6b:b6:e3:c6:9c:6e:2d:38:d8:
                    4f:94:c4:51:c5:7a:eb:6a:29:d2:82:be:35:f2:72:
                    1e:d5:0e:17:89:15:48:99:18:49:02:13:0a:b4:8c:
                    3c:83:cf:c9:18:92:9d:bc:f5:00:a7:7c:ee:65:6e:
                    fa:ff:0e:c7:77:a2:a0:e8:e5:6e:6b:5f:c0:74:2d:
                    56:07:7e:10:3d:46:57:4f:b2:c8:f5:60:8a:2b:89:
                    e2:56:9a:76:b5:9d:92:5e:4a:55:99:1a:1b:40:c1:
                    95:a7:b7:6b:12:3a:45:29:22:eb:3f:ab:72:28:03:
                    4e:3e:a4:95:84:fd:b3:ae:fe:68:ba:c2:bd:12:d4:
                    ef:1a:b7:5e:ed:f5:6d:79:7e:53:b3:30:f6:fd:20:
                    34:82:05:b4:8e:a7:fc:38:f3:ea:dc:5c:09:f3:82:
                    c3:cd:d4:b2:bb:6b:62:83:22:94:ed:e5:ff:e4:a5:
                    19:4c:03:fb:d9:ba:89:3b:9f:5a:f6:bd:8e:e1:5a:
                    c6:1a:a5:69:6c:ab:84:07:b2:c3:8c:a0:4e:86:b7:
                    f4:6a:00:1d:1b:f7:c4:60:57:50:6e:3a:d5:88:8b:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:e20::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:c7:df:61:db:05:ba:49:14:9c:61:23:ba:c4:74:e7:fd:
         f1:49:59:b2:22:17:fe:a4:b8:1b:da:b0:3d:02:e6:f8:d4:32:
         fb:df:83:4b:3e:50:02:40:2c:82:a6:1e:c9:02:23:60:45:4a:
         13:3d:86:26:e3:8d:c1:6e:33:a9:0b:26:71:77:4b:2c:63:3c:
         d9:77:5a:9e:2d:44:e3:4e:cf:09:fe:36:08:b3:85:71:7b:9d:
         1a:f2:d2:b5:3c:5e:61:d9:f5:ba:d8:6d:93:f4:26:85:5d:02:
         eb:93:a5:99:48:b6:8f:6c:2c:17:40:0e:f8:fd:ed:0b:36:dc:
         dd:e1:cb:62:e7:b8:a5:f8:82:d9:2e:ca:4e:f1:93:06:0b:f9:
         1a:c8:65:2b:34:ef:58:56:02:63:4e:23:a0:b5:ca:ce:aa:63:
         ac:e0:7a:c1:ff:9d:7d:ab:bc:ec:af:96:21:c3:fa:ca:d5:fb:
         e7:70:14:0b:2e:d8:50:f5:1c:e6:50:e8:1f:65:24:c0:ef:d6:
         25:dc:72:77:09:87:f2:b2:55:1e:bc:5a:e0:02:83:78:e5:2c:
         a1:d6:ee:24:73:dc:3a:b0:0f:42:b6:1b:ce:0e:66:c7:70:2b:
         90:5d:6c:d5:b1:b1:2e:2f:72:0a:f1:27:58:f1:72:dd:49:fd:
         e1:be:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----