Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
File:                     kuDCRw6wpptO-lhbnLLAZ2ErN54.cer (raw, json)
Hash identifier:          +788VIk0box6jFA7X98fHCoQ4gbh7ZzffTmsRpkkrUk=
Subject key identifier:   92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA375B1650FF1A0D90744707A88E0E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207411
                          IP: 2001:678:c38::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:37:5b:16:50:ff:1a:0d:90:74:47:07:a8:8e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ed:8c:d2:13:28:ab:9d:67:84:96:37:fd:43:
                    66:b0:84:d1:66:7c:d9:a3:35:e6:7d:3b:7b:4c:49:
                    0a:90:98:1c:bf:56:55:d3:e6:8a:74:32:d3:25:2a:
                    8a:33:87:3d:fd:1c:14:e9:1d:e9:65:3d:8b:5c:d6:
                    d9:06:f9:be:2b:f8:32:a0:a8:79:09:ab:1f:c4:90:
                    b7:f2:55:18:05:4a:37:e9:af:b0:92:2d:82:80:47:
                    2d:e7:e0:6b:85:fc:79:97:81:ec:e8:7d:4c:77:d5:
                    9c:75:07:96:3a:f0:3d:fc:30:00:6c:3a:10:b8:05:
                    88:ae:21:36:1b:f7:60:df:df:79:b4:43:79:71:d0:
                    6c:52:0c:ee:c6:d1:6c:5e:3e:60:51:31:de:3a:1e:
                    a6:49:45:d0:0b:ba:1d:05:3e:c7:3f:65:98:36:88:
                    76:df:5a:f4:8c:59:bf:52:b1:37:d7:be:a7:36:37:
                    ee:ad:17:67:49:d6:54:30:db:1a:2c:42:d8:16:e7:
                    b2:14:00:bc:30:e7:bd:c5:fd:0c:ae:0e:c9:de:0a:
                    30:fe:6c:93:65:f3:ce:51:94:aa:fc:07:0a:ac:ac:
                    4f:90:24:8c:29:88:d9:5a:82:34:b8:68:d7:cb:8e:
                    9e:90:a5:60:30:67:2c:71:c5:7f:18:64:49:38:1a:
                    6e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c38::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207411

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:9c:96:6b:46:37:49:91:d9:99:32:ce:87:55:dc:7a:90:
         c5:e9:f3:23:58:1b:d4:60:3b:c2:12:ed:93:47:50:77:86:87:
         6d:28:d0:a6:21:71:d4:c9:b3:5c:28:64:4a:51:af:0e:3c:90:
         19:74:c5:1a:1d:a0:b6:59:1a:27:93:6c:0b:cf:42:8f:c1:be:
         d9:93:d5:b8:58:e3:3c:ff:89:73:fb:c7:94:c5:84:ce:e6:cc:
         aa:a4:45:30:3d:2f:2c:aa:6f:0c:f7:f6:e9:c8:78:d5:20:3e:
         65:c9:1e:ae:c9:4d:12:53:ed:fa:a1:5f:72:0e:df:26:1e:9e:
         17:06:87:5a:6b:84:04:e5:62:6e:53:bd:d7:98:eb:c5:a7:8f:
         03:02:92:7f:ef:c2:53:4b:f8:1e:e9:1a:e5:6a:93:fa:17:7b:
         9c:ef:c8:c3:e0:63:3e:ee:71:d3:ea:e7:c0:5e:30:38:f9:a6:
         95:75:93:bf:e4:0d:5a:bc:c0:50:f2:96:98:89:28:c5:75:e8:
         6c:b6:bb:7e:10:b5:d8:a9:76:4a:41:0d:36:08:41:72:d1:69:
         44:db:b0:39:4e:4b:ce:3e:4d:24:06:98:26:97:d8:e0:f6:ab:
         c5:b7:ea:d1:01:39:00:d3:2a:4b:85:f9:cd:9b:ee:ae:7a:f7:
         b8:38:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----