Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
File:                     kNPlNxtkq5QtbcugSt_yrnq3xxI.cer (raw, json)
Hash identifier:          mF+fkCSwQ3i2Jln3BCcChu16Cedzk0b2Rma9AEHOdnQ=
Subject key identifier:   90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942369D462601349557A3AC8320FA09086
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 31431
                          IP: 195.128.228.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:d4:62:60:13:49:55:7a:3a:c8:32:0f:a0:90:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:48:62:29:58:47:ba:4b:e8:c8:0c:0d:e2:c7:
                    e6:60:99:06:af:45:f6:c3:8e:51:ba:9f:c9:39:d8:
                    51:70:4c:f0:0d:f6:be:a2:5b:a0:15:ce:fb:d0:32:
                    57:4d:1d:f3:ef:54:99:05:fe:c3:5d:b5:49:dc:1c:
                    81:9a:96:cf:eb:72:f6:e4:fe:3a:bd:32:33:e1:d3:
                    33:d7:e8:72:0d:98:56:4a:3b:c6:e1:b1:f4:f0:c7:
                    e3:89:6c:f8:0d:ae:09:bc:84:67:c4:ce:77:37:f8:
                    e9:b5:f0:97:5a:da:7d:56:c3:56:bf:42:a9:f4:f8:
                    4f:eb:81:09:40:cb:d5:0f:46:05:5a:ba:f1:3e:a1:
                    e4:56:c5:2e:f7:19:ba:06:d8:9a:96:f6:22:23:11:
                    98:4b:ad:9e:64:49:c6:9c:d4:c6:2c:b6:2d:e3:6c:
                    43:d6:b4:88:05:91:0a:ac:d2:57:bd:7c:97:da:b5:
                    a6:0f:f5:70:06:34:9c:65:5c:68:52:87:00:d4:7f:
                    71:bc:59:a2:0a:69:4a:bd:79:05:b7:bd:73:eb:27:
                    09:7f:ff:97:1e:dd:7f:ec:27:bd:c3:ba:d8:48:f3:
                    cd:9a:13:98:24:bd:01:d7:4e:16:b5:b2:c4:23:d7:
                    45:0d:64:ab:9d:11:68:68:a8:2e:df:ca:35:79:04:
                    92:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.128.228.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31431

    Signature Algorithm: sha256WithRSAEncryption
         6f:84:42:98:01:1c:ad:04:a9:7a:96:18:61:ad:14:53:43:0c:
         c7:48:ce:8d:ce:9d:3f:99:22:07:bc:9c:cc:4e:e5:7c:ad:60:
         e1:0d:b5:6e:9d:95:64:d6:ea:74:ef:f9:c6:8f:95:d1:2e:96:
         3d:df:de:56:15:44:e4:64:9f:d8:af:b0:a3:ec:02:bf:51:82:
         8c:38:e4:5d:92:c4:8c:6e:59:7d:45:f3:8a:29:c6:6d:3c:ef:
         ba:d4:3a:87:4c:f3:59:46:6b:fe:35:53:92:e7:15:43:74:73:
         ca:3f:38:8f:3a:94:56:f1:75:4d:d5:54:91:8d:86:99:f0:e5:
         66:f8:e6:e8:70:c0:f0:2f:4c:4a:94:2a:84:f2:36:13:de:26:
         44:5a:14:ca:de:4c:7f:1b:ef:70:43:ed:0f:d5:68:e2:a6:75:
         ce:b0:31:04:83:69:64:e0:ff:24:de:f4:c9:70:4b:b1:3a:52:
         f3:c6:77:35:f2:92:4b:74:aa:ae:92:11:e7:59:ba:de:2b:94:
         6f:01:3d:ac:99:65:00:02:9d:13:23:04:62:d0:99:30:6c:d7:
         f7:8e:d8:ec:6c:90:74:3d:a7:72:62:e0:73:d8:db:98:d7:86:
         fa:4f:cc:c7:77:54:4f:c1:bd:73:0b:f9:0f:d0:4c:05:fa:e2:
         82:9e:18:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----