Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h7-ak2z5rSjsWNt5imD9cd9sN_M.cer
File:                     h7-ak2z5rSjsWNt5imD9cd9sN_M.cer (raw, json)
Hash identifier:          l1Gc/vkTAwlL0/fMCF8qLboP5+j6g/ZF7oXtNnpi350=
Subject key identifier:   87:BF:9A:93:6C:F9:AD:28:EC:58:DB:79:8A:60:FD:71:DF:6C:37:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8CA73F1778D92449A1243A89D87CF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/h7-ak2z5rSjsWNt5imD9cd9sN_M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51217
                          IP: 2001:67c:2dcc::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:a7:3f:17:78:d9:24:49:a1:24:3a:89:d8:7c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=87bf9a936cf9ad28ec58db798a60fd71df6c37f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:f6:bf:bd:4a:e2:26:c9:16:9d:ec:36:29:
                    c1:c9:56:9b:19:09:42:e2:ec:49:6a:9a:11:2e:e3:
                    c4:76:f0:3f:fe:e4:57:18:19:35:13:37:d5:7d:7f:
                    19:48:51:af:2a:a7:d0:3f:14:9f:7f:14:3a:0d:ee:
                    81:18:33:e1:50:58:4a:bd:7b:5d:7d:36:1e:d1:ed:
                    c3:70:4b:86:9e:73:dd:5c:a9:6b:d5:3c:5c:1c:31:
                    56:6e:cb:ac:a0:c0:ef:cc:bb:e0:b4:13:d5:3a:bb:
                    81:a3:03:76:2b:6e:f3:b2:83:92:a4:e5:3c:1e:43:
                    48:46:d5:87:5b:30:e0:f2:bf:ac:7a:11:20:13:a5:
                    cd:70:77:d0:6f:36:d2:47:76:3c:bf:32:3d:9d:2c:
                    26:3d:d9:ae:c7:ff:e5:aa:bb:5b:3d:b3:32:a7:ec:
                    52:35:68:19:d2:6f:72:09:ca:2d:28:74:f5:63:3f:
                    c2:b9:cd:ca:d4:4b:66:25:72:61:bd:9e:06:4f:82:
                    2b:ce:f7:d6:2a:32:5d:7d:63:f3:0b:21:bc:b0:16:
                    ba:a6:a6:ed:30:8f:bf:c7:83:4f:6b:28:2f:9f:13:
                    91:06:c7:bc:1d:07:e7:ac:68:09:85:f8:82:2c:2f:
                    fc:32:a4:17:40:b6:54:1e:22:2e:e4:d6:28:67:4d:
                    70:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BF:9A:93:6C:F9:AD:28:EC:58:DB:79:8A:60:FD:71:DF:6C:37:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/56c6cb-a36e-4e1c-a432-4f97772b0180/1/h7-ak2z5rSjsWNt5imD9cd9sN_M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2dcc::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51217

    Signature Algorithm: sha256WithRSAEncryption
         97:51:56:f5:b5:a0:15:3f:87:cc:d1:2a:92:a3:5a:ff:6c:cc:
         c9:6d:7f:4d:2b:ae:48:98:bc:97:87:f0:eb:a8:be:64:80:5e:
         5d:ea:4d:28:ac:ec:95:f4:ba:c8:08:3b:5d:2b:73:0d:85:fa:
         29:9d:1c:1f:85:fc:4a:4b:71:4f:94:ff:c4:25:e8:a0:d1:45:
         81:57:5f:1c:ce:c6:42:2c:04:f9:27:28:c2:b4:c6:39:f0:44:
         48:c9:3d:48:99:00:9f:4f:61:a0:66:c7:21:75:dc:22:92:45:
         92:cc:fc:1a:36:1f:00:db:e5:1a:38:a2:2c:9a:54:30:0d:c6:
         9d:83:a2:f6:12:53:2a:fa:67:b1:62:d4:27:17:1c:c6:2f:27:
         86:3f:d7:60:22:57:3f:b8:ad:ad:3c:97:e9:94:64:b8:9d:85:
         d3:2c:e9:00:a4:5d:9e:d8:9e:9d:f7:f8:e5:4c:2b:98:55:57:
         12:db:fc:9a:0c:36:e0:21:13:eb:ac:b7:58:6a:4f:f3:73:d9:
         4e:29:2c:e1:61:cf:b4:4e:0e:cd:8e:49:5a:c8:ce:5a:b4:84:
         2a:25:42:ff:5b:69:79:93:09:5b:12:1d:94:0d:65:3b:18:8d:
         dd:4f:8a:20:fc:1b:bb:63:30:d3:31:53:f1:70:9e:67:e5:b9:
         59:16:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----