Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
File:                     h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer (raw, json)
Hash identifier:          Vi64jarfN9ZvJluqj9npTcABcZZsxFGJ/zmhNskaVek=
Subject key identifier:   87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942823A970107B7D41145777198E83F1E9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215437

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:a9:70:10:7b:7d:41:14:57:77:19:8e:83:f1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=87d49ea28d2591f72e757c7dad300814c27794be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d1:71:fb:06:fe:be:89:7d:42:0c:c3:3f:f4:
                    19:8d:16:4f:d7:90:df:a7:ea:01:c3:16:0f:d8:bf:
                    31:af:2d:01:c3:a8:73:f6:3b:fa:40:03:90:e6:25:
                    43:e1:95:3c:ef:fe:89:c4:f4:7d:db:c7:1d:5c:41:
                    24:8c:7c:aa:3c:b6:88:7e:25:7e:d8:38:24:d4:85:
                    8b:c7:23:e0:35:db:f2:b5:ac:1d:74:81:c8:31:70:
                    d7:8e:f3:7f:2e:e6:c9:3b:f9:c1:20:e3:37:2e:b4:
                    34:8b:f8:07:b5:b1:43:4e:4d:cc:98:da:3a:43:fd:
                    38:6f:c6:c0:66:72:86:f3:90:ba:0c:de:80:ab:4c:
                    55:60:d8:76:64:36:82:af:38:28:63:e4:1f:74:96:
                    12:19:83:eb:3c:b6:09:b8:b9:22:d7:63:53:e1:77:
                    62:03:04:69:cb:6e:1b:dc:f5:17:b3:4b:9d:05:53:
                    ce:b9:86:5d:f2:bd:aa:8d:1f:30:0b:a8:14:c8:a6:
                    52:02:72:c7:c4:b1:aa:85:aa:3e:5f:e5:a6:20:c8:
                    6f:20:55:f4:f0:6f:b9:e4:65:8a:c9:8c:4c:e2:e5:
                    98:92:f8:48:30:56:a2:1b:4b:b9:11:f6:ba:f2:40:
                    1c:f3:4b:e6:36:25:81:af:d6:2f:93:52:d9:c3:e6:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215437

    Signature Algorithm: sha256WithRSAEncryption
         28:dd:b2:2a:4c:a1:51:fe:54:fa:36:ce:ac:7e:f5:4f:ee:64:
         3c:89:26:90:35:3d:6e:42:d7:67:8b:92:72:17:a9:e7:cb:54:
         5e:93:b1:f4:10:3c:4b:14:5c:c7:ae:0e:9b:59:b5:46:5c:6e:
         27:80:4d:a2:7d:01:88:7b:f3:1e:65:08:02:d4:c0:9c:63:ac:
         da:e3:e0:c4:23:58:8e:f5:32:ed:76:c3:49:37:8a:36:19:95:
         07:99:19:6d:30:48:d7:f8:2a:f1:aa:d4:96:3c:06:d7:c2:03:
         d5:99:c2:86:69:fd:ee:d7:1a:7f:59:0f:9e:ac:83:9f:56:92:
         62:6d:5f:f8:db:6d:13:33:76:70:b1:2a:86:5e:10:69:48:39:
         cb:d6:66:c9:3d:5a:2d:a8:8a:5d:a9:d7:64:93:66:ef:7c:f3:
         17:fb:af:09:d5:b3:3b:b8:24:00:a6:7b:3c:6a:81:ee:cf:db:
         99:9b:8f:17:3a:ff:f4:05:02:7c:45:50:00:cf:f5:b6:fa:fe:
         a7:c8:39:7e:b9:f9:fc:fe:6a:ad:88:f3:3a:a5:f7:78:af:fe:
         95:82:62:3e:81:3a:b0:77:df:0f:c2:0c:f2:d7:b2:2a:a7:31:
         3b:be:88:60:30:ca:36:03:52:be:cb:2e:80:a8:ff:54:e0:e2:
         11:f2:78:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----