Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
File:                     mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer (raw, json)
Hash identifier:          pQf3Puu9/1s7Bs1EadWnysqIQUs1+tKSzFqMzKocg9o=
Subject key identifier:   98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420682068ED2E24FCA343603FC8B56B8A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200202

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:20:68:ed:2e:24:fc:a3:43:60:3f:c8:b5:6b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=983ea291971990dc486f93812783fadd87ade863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:83:fc:14:77:c8:7e:2f:7f:a0:9a:04:92:
                    50:aa:93:ab:28:9a:0b:22:07:60:37:15:54:ae:20:
                    d7:f1:d4:4b:d7:04:d8:09:78:d7:8d:94:ef:1b:89:
                    d3:87:25:6f:de:6b:83:d1:6c:41:c7:b5:f2:2e:dd:
                    62:48:69:7c:a2:74:65:90:6f:90:7f:e7:ce:39:a6:
                    ce:b9:3f:ae:b2:e1:82:e4:83:54:a8:c4:8b:5f:a8:
                    e1:0c:b1:8b:d7:43:7f:08:af:dd:92:79:14:d1:13:
                    c5:34:61:61:c8:34:b5:18:23:7e:9d:f8:41:4d:fe:
                    d9:95:d6:b4:c9:c6:d4:3f:60:52:29:9d:73:9d:5d:
                    0e:f4:4b:4a:4d:c1:0b:23:f5:ac:4a:6e:fe:6f:3d:
                    65:30:85:2e:61:aa:af:89:6b:92:f4:20:03:dc:b0:
                    b1:66:00:60:7b:3b:d5:db:07:66:9a:95:10:07:90:
                    b8:20:f8:c5:26:67:d6:6e:8d:23:ee:9c:a8:b5:84:
                    ff:20:2f:13:65:fd:1e:c3:36:1a:34:d0:bc:f2:56:
                    7e:67:ac:5c:dc:f3:84:32:78:f3:ee:d7:91:0d:2b:
                    8c:fa:5f:7d:8c:18:7f:24:8d:5f:1e:cc:2f:60:18:
                    aa:d0:a6:25:55:c7:1c:d8:e3:0f:ea:d4:10:63:cc:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200202

    Signature Algorithm: sha256WithRSAEncryption
         73:71:9f:2d:6f:3f:53:68:22:da:35:bf:42:d0:b7:93:6f:3e:
         a7:56:76:4a:ab:ed:70:48:a6:76:89:c8:3f:6d:82:bc:8f:89:
         45:7c:40:24:43:01:ef:fb:e6:46:ac:45:46:c5:45:53:2a:b0:
         dc:5e:c1:69:fa:ff:56:74:b4:1f:75:4a:f3:ff:06:86:89:ff:
         73:50:de:bb:c2:d5:b0:2b:53:c2:21:7c:e7:37:44:85:77:29:
         6a:c8:bf:11:96:72:80:f8:79:5e:d2:67:be:c3:79:ad:7b:ed:
         f7:b2:37:b9:ea:3d:3a:89:4e:b1:4f:b6:6d:aa:25:7f:68:26:
         27:21:16:a3:a5:c1:3a:1b:fc:46:61:4a:55:2f:82:62:9e:1e:
         09:c3:ff:d4:ad:3e:e1:ec:bb:2d:41:03:bf:b3:fe:c1:89:62:
         2e:b8:5f:af:ed:8c:fc:19:29:38:70:0c:9d:e6:1c:8d:c4:7c:
         a6:1d:b8:21:e5:bb:48:59:ea:a6:02:70:7b:27:46:71:de:90:
         be:ff:88:e3:0c:c9:a4:1c:43:b8:4a:b3:78:af:cc:5f:05:8d:
         46:4b:7a:54:f6:00:ea:fd:7f:66:67:38:85:86:cb:2f:6b:1b:
         ed:1e:23:34:1d:fb:08:36:ef:fa:b4:4c:da:4b:b2:a9:b0:52:
         79:34:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:26 2025 by rpki-client on console.sobornost.net