Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
File:                     qKI6ziwGf44hL_NZ2pbCBYtks-o.cer (raw, json)
Hash identifier:          Fd6Pm/p1CCQ7wYQ6FIATK0u2kLEpYY4XyIV3gNN2TJc=
Subject key identifier:   A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BA05AB1CD7FE5F01EC3C4276B3AEF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216415

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:a0:5a:b1:cd:7f:e5:f0:1e:c3:c4:27:6b:3a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:0b:d6:1c:fb:70:04:42:be:ff:f8:08:f1:
                    16:01:8f:92:77:12:e9:89:bd:6b:3b:f4:32:3c:ea:
                    07:c1:8f:56:c9:e1:5f:e7:ae:d9:4c:c6:02:08:0d:
                    60:29:18:da:1c:b5:d3:21:5f:62:a9:c3:70:c3:10:
                    37:a4:82:73:5f:d2:8b:95:f0:57:72:04:55:e0:42:
                    8e:3e:95:86:b0:4e:2b:fc:aa:0b:45:24:2f:10:1b:
                    cc:2a:18:c2:02:d8:c9:cb:02:6b:a6:0b:93:27:d3:
                    96:5b:d9:b4:ee:7b:8b:50:05:2b:73:56:28:1f:24:
                    d2:4c:12:42:4a:0e:8c:16:1a:d5:6c:c3:55:4f:43:
                    87:04:bd:28:8d:60:5e:41:1f:be:e0:09:26:5c:ac:
                    74:63:6e:cf:d3:2c:70:09:d9:58:c2:40:27:d6:87:
                    9a:44:93:aa:01:26:fe:f4:6f:66:83:7f:5c:69:08:
                    04:b5:52:33:ee:62:c9:3e:7a:b0:ab:0b:f9:88:49:
                    a5:75:51:5a:82:68:e3:eb:62:1b:81:10:1b:f0:f0:
                    6f:75:85:fc:d4:26:72:4c:ce:dc:01:19:b8:81:7b:
                    ce:f6:3a:ef:e7:b3:a7:b2:1b:a8:71:5c:27:fe:e9:
                    52:e6:61:0e:66:87:d6:f4:f4:1a:8f:8d:ca:ff:27:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216415

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:59:09:ae:f7:9f:d6:4a:a6:e0:68:43:2b:5f:7d:00:e5:
         6a:e1:92:b9:55:6b:e8:47:fe:dd:e0:63:ec:33:fb:26:46:24:
         36:65:99:2f:f5:8d:ef:95:1e:6d:7d:9d:b5:e5:34:46:12:02:
         a8:66:97:7e:fb:5c:2c:9a:ca:8a:92:61:7d:3b:07:4f:f5:f0:
         cb:f1:70:98:89:e3:75:5b:20:df:21:0f:e4:eb:b2:7f:bc:6a:
         af:95:95:b5:11:95:aa:bc:38:5a:f3:58:70:4f:9f:40:04:c6:
         a1:f3:a3:d5:a2:43:1f:87:df:e6:91:5a:07:d1:bb:75:53:90:
         c1:74:b5:60:9b:40:c9:50:18:5b:cb:14:5a:07:71:65:6e:2e:
         04:79:3e:9d:8b:2c:50:37:da:d3:c7:38:31:3e:83:0d:d1:76:
         00:87:f3:1a:23:9d:2e:b4:90:20:8e:d5:37:32:86:1c:2d:98:
         8c:56:c5:b9:47:89:36:d9:d5:40:fa:6c:a7:82:2c:62:4b:09:
         dd:1b:e2:01:f6:d9:dd:45:29:53:46:2a:6f:dc:8e:06:30:bf:
         27:05:69:ca:82:c2:02:ad:29:06:e6:75:00:2d:38:fa:a5:d7:
         7f:a7:45:f0:68:b4:76:57:b3:ec:c5:8d:28:be:72:10:ae:12:
         13:e9:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----