Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
File:                     f_dNq9TrGqEUcUThWwJmnpgv3k0.cer (raw, json)
Hash identifier:          /kIDLfvLil/6E8zgUdhUjV4/Y8zhnMK26XDs1TcgVxg=
Subject key identifier:   7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F7ADE96020F530C6BF241F49E29A5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215627
                          IP: 2001:67c:da8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:7a:de:96:02:0f:53:0c:6b:f2:41:f4:9e:29:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:ff:d3:d0:d8:5d:f3:c2:1c:c9:19:92:ee:
                    d5:54:c8:40:79:f4:66:79:66:8f:70:87:98:e2:18:
                    ed:45:0b:cf:05:06:f1:6a:92:b6:19:99:6d:3a:72:
                    a8:0f:0e:5e:86:6c:78:e9:e3:b7:b3:01:b8:7b:50:
                    3d:ad:45:6f:fc:22:c3:08:d0:b4:c0:b1:c7:34:b7:
                    80:b4:02:bb:2c:8c:45:8c:35:be:2b:c7:c2:7c:81:
                    01:2d:0a:74:a1:b3:44:b7:74:aa:e4:ce:9b:7f:86:
                    fd:a5:b7:66:48:df:ab:86:78:7a:31:b3:44:c5:bb:
                    a9:4b:81:9f:f4:52:e0:de:f1:cd:3c:39:6a:ea:54:
                    db:33:1d:db:ac:ab:cf:4c:46:5a:e9:6e:a2:6f:db:
                    78:ef:17:94:48:fd:61:14:2e:76:46:8e:07:34:f5:
                    5f:fe:2c:5b:76:f2:d9:ef:4e:25:d3:8a:b8:28:06:
                    3e:d2:39:86:49:21:63:a7:78:de:99:e5:79:93:68:
                    88:36:74:b6:88:58:bc:e8:cd:36:4e:78:9e:8b:75:
                    b8:73:18:b4:83:72:64:7b:00:d6:df:34:b2:cc:c9:
                    48:cd:ef:fc:7e:ff:d5:ba:cf:5c:0b:3a:9d:9b:da:
                    8b:57:73:b1:bf:12:d4:ec:c2:11:01:00:ce:3d:ac:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:da8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215627

    Signature Algorithm: sha256WithRSAEncryption
         9f:a4:a3:83:07:aa:9c:aa:01:6c:4c:7c:8c:14:2c:0e:57:78:
         b4:73:8b:67:bd:b4:47:a8:49:99:e6:c1:6e:bb:8c:d6:bb:a2:
         12:e8:1f:70:e0:2b:af:30:7f:9f:42:af:fe:72:c7:4f:94:02:
         83:a2:4f:0b:5c:43:46:cf:b3:c8:fd:91:f3:3a:1b:bf:56:83:
         e3:df:48:15:af:d2:64:8d:19:29:3d:52:41:7c:93:8c:12:b2:
         ce:87:f3:f7:c6:c0:6e:1a:0e:54:30:c1:b2:67:2e:55:2a:ec:
         e5:a2:d9:54:4a:61:c7:c4:4f:37:c3:da:8c:47:dc:11:e0:ad:
         38:8c:ce:10:2a:ac:52:3d:0d:24:d7:ed:e9:c2:d6:95:92:64:
         c1:08:39:0c:12:0a:61:17:23:67:31:e0:75:18:1a:88:56:c6:
         3f:2f:78:32:d7:8d:85:a3:d3:e7:4e:97:15:35:6d:64:f3:36:
         88:b3:b6:88:3c:80:64:af:46:5d:f6:4a:99:4b:b3:17:cc:6f:
         0c:08:6c:49:38:87:fb:53:2e:f0:49:99:46:a7:1e:53:9f:d6:
         39:cf:6c:96:7b:b8:70:16:f8:09:0b:97:f0:df:2d:a1:a7:77:
         6c:66:67:2d:08:0a:0d:17:42:3e:b2:62:7d:34:16:49:eb:f9:
         9d:47:6e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----