Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
File:                     jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer (raw, json)
Hash identifier:          KvtBmOCbpvyB2sldooT+3nMoT9HkkXAEChu1Pjv4yDg=
Subject key identifier:   8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143BC49F4E11AF8B4866E3EDF2CD674
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207563
                          IP: 2001:678:be8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:bc:49:f4:e1:1a:f8:b4:86:6e:3e:df:2c:d6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:22:36:ae:e1:10:9a:be:d4:e5:c5:f8:29:
                    2e:16:1a:86:27:94:73:f1:90:30:37:83:2c:d2:5e:
                    29:db:82:01:b2:b2:60:5d:cb:76:9b:f8:1e:85:63:
                    70:12:7f:f0:f4:88:6c:e7:17:93:9c:01:29:06:db:
                    a3:d6:15:7a:f5:42:0b:bc:e9:c3:df:8e:75:09:17:
                    3f:1e:c8:c7:ea:19:2a:3c:4c:c9:9c:b1:88:88:33:
                    9f:6e:4c:de:ef:79:9d:0f:19:81:63:3b:b3:f1:7c:
                    79:1b:a7:6f:7b:0c:17:6a:d9:15:4a:0a:35:c1:ec:
                    72:f8:24:5d:18:d8:22:ec:df:fe:71:bf:79:51:3c:
                    1d:2d:58:86:6e:0e:8f:22:fb:fc:9f:26:c4:09:21:
                    ec:85:ee:87:cc:c0:fc:20:62:f0:26:44:a0:16:75:
                    49:36:91:41:b8:aa:b7:e1:f1:53:4a:17:cf:14:47:
                    c0:7a:ed:8f:f0:b8:5f:f1:4f:93:82:0f:35:bd:6b:
                    68:01:26:32:22:21:a9:61:1c:81:36:b7:64:43:32:
                    d0:9b:3c:29:81:0b:44:a7:93:bc:34:4f:4f:e6:3d:
                    64:65:2e:e6:5a:b7:17:93:6d:91:6f:c9:2e:75:63:
                    6d:b3:4f:f0:41:59:84:15:f4:ec:8e:88:ae:cb:62:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:be8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207563

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:88:36:d1:14:fc:1e:55:bc:ac:07:42:ac:c9:5b:8f:70:
         80:73:80:a2:50:26:d2:f7:2b:08:df:d4:84:28:dd:78:0c:67:
         9e:0a:06:59:48:50:a9:78:cf:5d:8d:36:88:60:51:05:35:e2:
         02:0f:c8:bc:62:c4:24:3d:cf:cf:c1:57:a4:80:2e:b4:e3:83:
         9c:b5:b9:44:3b:a3:08:26:00:74:c5:19:7a:81:5e:84:f3:c6:
         af:08:a4:b8:8b:d9:10:1e:df:c0:60:c7:6f:50:2c:d6:15:7e:
         fb:ac:da:9b:de:70:c2:75:b7:46:fa:2e:89:8f:2f:eb:09:2a:
         75:a2:7b:78:14:b9:dd:48:68:36:f7:2b:43:d8:18:ed:6b:fe:
         63:a4:5a:1f:a3:ab:6f:be:1f:c1:ca:ae:ef:66:07:67:0f:47:
         55:dd:68:ce:02:03:54:86:5f:03:be:bd:52:87:17:d2:81:23:
         e1:b9:3e:e9:62:46:00:98:70:cd:9f:ff:ef:a6:7d:c2:28:93:
         d1:34:22:51:0b:e3:74:d7:d5:a7:c0:33:59:42:79:cb:20:c0:
         cd:3c:09:dd:95:ba:7b:4f:d4:3c:68:05:f8:df:01:59:d8:8f:
         e6:fa:54:49:9f:50:57:6d:5e:ce:ff:dd:9e:3d:3e:ae:62:d7:
         b2:42:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----