Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
File:                     gEH-6hI_ywfocqjLS92at7jaL88.cer (raw, json)
Hash identifier:          HtDkTLTFTN0dgofauHA0jI6seDesEuc+XeXX+u0sCvU=
Subject key identifier:   80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194222032F7D1A8C0005CC16B52EAC799DD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200258
                          IP: 2001:67c:b50::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:32:f7:d1:a8:c0:00:5c:c1:6b:52:ea:c7:99:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:27:5c:a5:b5:6a:fd:a5:10:5b:86:2c:94:
                    33:3e:53:7d:5b:0e:38:3c:ef:3e:15:07:ee:6f:29:
                    01:7b:04:fd:86:82:e0:d6:5a:04:b7:5a:52:8d:18:
                    9e:48:c8:80:d8:49:96:80:a7:f7:7a:86:97:41:be:
                    0f:35:44:26:84:a8:3f:6e:03:6f:3e:e3:b4:05:e7:
                    80:fe:0b:91:29:b4:dd:62:3e:15:58:e3:c9:c5:b3:
                    95:9a:70:11:25:23:ef:23:c3:38:e8:3c:4a:25:4f:
                    dd:53:da:2a:d6:a2:f6:e6:84:6c:44:9c:fc:fe:99:
                    98:0e:7f:85:5a:08:5a:38:a4:91:7a:75:13:d8:5b:
                    aa:10:65:be:99:6b:19:2d:32:f1:64:47:94:7e:6e:
                    d7:e9:c3:85:d6:19:72:eb:c9:3d:3a:cd:a7:0d:e1:
                    95:07:a9:9c:b7:30:9d:f0:52:57:4b:cc:7f:f0:6e:
                    2a:4b:5b:a8:79:22:a8:e7:87:24:b6:cd:54:8f:70:
                    be:ef:95:51:5a:44:d9:a2:7b:45:7d:c8:61:8d:31:
                    39:b2:67:7a:b1:f6:c5:f2:c8:d4:69:61:41:a7:e8:
                    d5:3a:66:73:f8:b8:a7:ed:65:4d:a5:50:40:41:bb:
                    38:ad:a1:e8:c6:5b:a5:42:c0:eb:2f:02:04:61:fe:
                    7c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b50::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200258

    Signature Algorithm: sha256WithRSAEncryption
         53:2f:84:1e:f8:93:3b:df:dc:26:96:7b:6a:14:06:6f:55:07:
         91:2f:e7:07:56:4f:ee:9e:09:0f:7a:c2:f1:b6:f8:e0:a1:28:
         65:17:4d:ea:48:19:3d:93:de:14:3e:28:01:c5:63:d2:85:b1:
         32:c0:76:f3:96:de:a8:6d:d4:4c:d2:f1:19:82:ca:32:23:30:
         06:d9:bb:db:f3:32:27:cf:d3:1d:0a:8a:75:5a:6c:4e:5b:17:
         c8:73:b5:b7:16:06:a7:b5:58:62:3a:5f:f1:d3:96:82:45:98:
         b4:90:b1:9f:65:3b:d1:7f:c0:a4:12:e6:67:c0:23:d1:fb:ff:
         9e:9d:57:db:5e:ff:fb:40:d7:b3:e2:9f:4a:e5:3e:87:db:70:
         f2:4e:f1:7d:c2:1b:90:8e:48:86:2c:7b:3a:3b:1c:81:84:7c:
         db:47:07:ee:c1:98:d3:3d:69:fa:1f:07:3c:cb:fe:cb:e2:c3:
         3c:16:a8:bf:60:7e:9c:56:bf:88:e5:13:16:d9:59:00:36:18:
         e4:e0:78:02:71:d5:0f:2d:b6:b5:b4:2c:cf:06:6e:12:34:69:
         19:2f:45:48:f1:db:8b:6c:d5:54:c3:51:57:53:75:b0:2b:ca:
         ea:1a:56:21:f4:96:49:80:4e:3c:aa:6a:92:52:bb:1f:2b:a0:
         f0:a9:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----