Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer
File:                     eJwCNiZh7UHo-Xohsan6yuU96P4.cer (raw, json)
Hash identifier:          S+lcdQkvjBnF/Nwcu2r2KWBJ8nvhh121jeyOOQum11k=
Subject key identifier:   78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3CE24C17DF44ADE5EF25BC5692D62
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214290

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:ce:24:c1:7d:f4:4a:de:5e:f2:5b:c5:69:2d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=789c02362661ed41e8f97a21b1a9facae53de8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:63:7d:ff:fb:51:a2:f6:f7:09:3f:85:33:
                    ff:46:54:2e:a4:9c:6e:81:bd:7a:fe:8c:5b:76:2e:
                    75:c7:fb:7a:83:e4:e7:5c:e8:79:59:49:c0:c0:4d:
                    de:ff:af:a5:59:e9:32:2a:44:31:8f:7a:d9:de:44:
                    2d:db:c7:8a:16:d7:68:1f:d6:dc:87:de:b4:c9:66:
                    32:a1:d0:49:f1:cd:ac:0b:32:ae:69:b7:10:67:7d:
                    b7:87:3d:d3:9f:22:4b:a5:75:1e:d5:b2:b3:b7:7a:
                    c4:48:7f:1d:f0:e5:2b:30:6c:ef:5d:9e:ba:fe:71:
                    2d:ac:b1:fa:ae:a7:67:73:e0:c3:30:5c:a2:88:c5:
                    31:c2:83:b2:90:56:50:5d:52:b8:4e:ce:04:71:02:
                    e1:3b:db:66:81:32:8e:50:4a:8a:24:1e:8b:c9:5e:
                    2d:4b:1a:ae:dd:ea:94:b3:dd:93:e6:35:91:5f:70:
                    b4:34:fc:8b:a3:15:f4:c5:06:06:1d:8f:ce:43:d6:
                    59:2e:5a:dd:c6:f2:7b:00:45:98:75:74:88:95:2a:
                    1d:ab:5a:e5:bc:70:1d:aa:a5:ba:d2:da:81:0d:af:
                    55:15:a9:20:8c:83:06:13:0b:ef:4e:29:5c:b5:33:
                    81:11:4f:32:91:02:f2:01:2f:6c:6c:e7:5e:66:45:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214290

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:82:02:23:39:9b:b4:d6:ec:bc:c7:75:ad:7e:bd:df:1f:
         37:52:c5:11:7a:03:8e:fd:65:39:33:28:fa:54:4a:f4:c6:ea:
         a8:4e:f4:3a:d9:58:c9:5c:b8:c9:67:4f:5b:86:43:6b:eb:ca:
         f4:be:3e:12:12:99:bf:c8:2f:5b:e5:cd:8a:6a:a5:ec:7c:01:
         5b:71:28:bd:2f:d7:f5:0a:bb:94:c3:9e:c1:60:e7:a7:e1:7b:
         9b:54:35:8a:7f:5c:f7:3d:7f:97:ca:eb:0c:bc:e3:4c:d8:18:
         6d:68:d5:18:32:11:8d:87:93:8e:53:19:25:94:c5:fe:52:22:
         eb:82:5b:84:ae:8d:57:6b:2f:6a:57:6d:10:34:08:29:fd:7c:
         40:70:03:f3:68:da:ad:01:82:0a:bd:52:25:e3:1d:8b:d9:2a:
         ef:6c:88:43:96:ae:1a:66:76:59:cd:ca:2b:fa:c3:81:d4:a3:
         d5:b6:ce:00:18:47:a0:8e:16:8b:bf:df:55:70:0f:f4:03:29:
         70:63:31:9f:d5:58:a4:c1:13:e5:f9:36:fb:91:42:a1:ef:24:
         28:90:de:2c:25:a4:ef:b2:ee:10:6d:9a:0d:65:d4:d6:d0:32:
         4a:01:4a:dc:9f:fc:83:68:86:c5:9e:ab:f3:ed:d6:50:b3:83:
         17:e1:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----