Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
File:                     skmuabOnLsLm6a25kJDYEqHSmVE.cer (raw, json)
Hash identifier:          xJyldUjv634xAOD6lPTBpGi+B6LSg3yPt+HVWnj/qKk=
Subject key identifier:   B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6E93F93156B6C1E7960C2B32FFB85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:e9:3f:93:15:6b:6c:1e:79:60:c2:b3:2f:fb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:ae:8b:63:96:f8:a4:6d:fa:3b:ea:29:d0:
                    64:31:36:5b:32:3d:11:4e:5f:78:e5:37:76:6c:58:
                    fe:1c:62:2c:79:77:cf:75:8c:f1:d8:0c:89:e8:d9:
                    e8:9f:ef:78:73:cd:9a:d9:8a:d3:52:c5:e6:9a:ed:
                    dd:28:88:17:0f:97:2b:ba:ad:14:e8:3a:ee:4c:25:
                    4d:aa:b9:d3:a0:b8:87:ec:a6:d2:16:84:4b:0b:1d:
                    92:0a:b8:d9:e7:05:f7:db:c9:6d:f9:c5:aa:67:2a:
                    14:e3:7b:9d:ab:04:a8:35:08:31:7c:c3:c2:8e:c9:
                    48:55:15:98:c2:7f:12:66:89:77:1d:bc:61:c5:4a:
                    26:95:5b:a9:ce:84:90:9c:74:42:ca:81:be:81:68:
                    85:d6:29:f0:bb:f9:97:dd:a0:3c:68:e0:1d:52:15:
                    41:73:99:36:65:c6:ce:81:24:ee:38:f1:13:59:b2:
                    89:36:ce:1a:34:41:21:c7:96:ab:c8:dd:2f:dd:27:
                    bc:ce:7e:bb:b1:e4:14:55:56:79:9a:12:7f:37:22:
                    d6:4d:55:5e:eb:ce:fb:71:38:20:4d:cc:78:9a:7d:
                    4a:cc:5b:3b:c3:07:b4:ac:78:39:15:b0:6c:df:4b:
                    25:0d:aa:f5:79:71:54:7c:87:7e:0e:7d:1b:29:70:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:59:3a:40:ec:e2:8c:a5:5f:c7:51:50:79:fb:91:54:1e:09:
         fc:c6:6d:3d:39:3c:20:37:2f:57:a3:6a:cb:ed:87:ba:36:94:
         18:40:61:91:b7:af:cc:cc:9d:17:0a:91:46:08:71:4e:98:24:
         47:e7:4a:ac:c1:ad:39:6e:dd:36:3a:cf:b0:8c:c4:2f:5a:90:
         a4:90:2b:8d:21:67:01:d9:bf:44:c0:a3:67:28:b4:9f:8d:c5:
         4f:dc:39:d7:c7:74:78:0e:b1:9a:c7:27:0c:9a:89:5a:e9:a1:
         27:66:82:c7:65:dc:6f:8f:1f:07:17:fb:36:38:ba:89:24:ca:
         a4:b3:12:3f:3e:c5:80:03:bc:be:91:99:de:b8:18:d0:ee:fc:
         0a:28:b8:84:01:a8:02:8e:2c:08:01:ed:ac:d8:3c:c8:6d:15:
         0e:7b:06:f4:1a:37:a3:53:43:0d:f9:ce:9a:ee:fc:47:0f:8e:
         4c:d2:1a:d3:30:a3:4b:21:0d:ec:f2:04:6a:07:dd:32:fd:00:
         d8:e7:a7:5d:56:f9:28:fb:cd:b4:7f:b0:46:e7:6d:9d:05:f3:
         fe:b0:11:f5:18:04:ff:a5:0c:95:43:6c:d0:55:d1:25:62:92:
         d0:d8:cf:2d:47:37:e8:2e:bb:c6:71:ea:95:e9:6c:78:6b:57:
         4c:f7:7c:16
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQj1uk/kxVrbB55YMKzL/uFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjQ5YWU2OWIzYTcyZWMyZTZlOWFkYjk5MDkwZDgxMmExZDI5OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk2ui2OW+KRt+jvqKdBkMTZbMj0R
Tl945Td2bFj+HGIseXfPdYzx2AyJ6Nnon+94c82a2YrTUsXmmu3dKIgXD5cruq0U
6DruTCVNqrnToLiH7KbSFoRLCx2SCrjZ5wX328lt+cWqZyoU43udqwSoNQgxfMPC
jslIVRWYwn8SZol3HbxhxUomlVupzoSQnHRCyoG+gWiF1inwu/mX3aA8aOAdUhVB
c5k2ZcbOgSTuOPETWbKJNs4aNEEhx5aryN0v3Se8zn67seQUVVZ5mhJ/NyLWTVVe
6877cTggTcx4mn1KzFs7wwe0rHg5FbBs30slDar1eXFUfId+Dn0bKXB99wIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFLJJrmmzpy7C5umtuZCQ2BKh0plRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzY4NWI1
YS1mYTI3LTQxZWMtYWRmOS05ZGYyZjc5YmVmMTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNjg1YjVh
LWZhMjctNDFlYy1hZGY5LTlkZjJmNzliZWYxMC8xL3NrbXVhYk9uTHNMbTZhMjVr
SkRZRXFIU21WRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAAEMA0GCSqGSIb3DQEBCwUAA4IBAQA5
WTpA7OKMpV/HUVB5+5FUHgn8xm09OTwgNy9Xo2rL7Ye6NpQYQGGRt6/MzJ0XCpFG
CHFOmCRH50qswa05bt02Os+wjMQvWpCkkCuNIWcB2b9EwKNnKLSfjcVP3DnXx3R4
DrGaxycMmola6aEnZoLHZdxvjx8HF/s2OLqJJMqksxI/PsWAA7y+kZneuBjQ7vwK
KLiEAagCjiwIAe2s2DzIbRUOewb0GjejU0MN+c6a7vxHD45M0hrTMKNLIQ3s8gRq
B90y/QDY56ddVvko+820f7BG522dBfP+sBH1GAT/pQyVQ2zQVdElYpLQ2M8tRzfo
LrvGceqV6Wx4a1dM93wW
-----END CERTIFICATE-----