Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tKOpvnfi2f3n_-H1Fin5TpjqPNg.cer
File:                     tKOpvnfi2f3n_-H1Fin5TpjqPNg.cer (raw, json)
Hash identifier:          JVXerVmEzlXUgvZb4aEo72iSgF+5vrvtuRbcHayCDK4=
Subject key identifier:   B4:A3:A9:BE:77:E2:D9:FD:E7:FF:E1:F5:16:29:F9:4E:98:EA:3C:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DCD1B5354206946E907A41E74DF0D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/dd4148-89ab-48f8-8d6f-33cfa511b0c7/1/tKOpvnfi2f3n_-H1Fin5TpjqPNg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/dd4148-89ab-48f8-8d6f-33cfa511b0c7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34699

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:cd:1b:53:54:20:69:46:e9:07:a4:1e:74:df:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b4a3a9be77e2d9fde7ffe1f51629f94e98ea3cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:0c:b6:99:bd:06:e7:67:d0:55:b5:a2:16:
                    45:57:68:6f:b8:56:57:c6:78:9e:8f:2c:15:97:77:
                    36:b2:5e:87:f1:2e:a5:62:5a:10:c1:86:dd:26:0f:
                    24:88:35:ea:c1:2b:2f:ad:7f:83:dc:85:ed:f4:dd:
                    12:b3:8a:73:42:7f:58:3c:b4:53:27:48:a4:e0:3a:
                    fe:43:49:90:b4:a5:6f:8c:b6:2a:6a:bb:d6:f7:b3:
                    54:4c:a0:f1:16:10:eb:d6:47:3a:24:2b:60:c0:8b:
                    30:5d:b5:d5:0d:9e:42:84:9a:74:55:12:16:55:ba:
                    86:08:c9:8b:1d:9d:77:17:cb:7f:44:ce:02:ae:07:
                    3f:40:9c:10:59:77:11:78:d2:95:76:0a:a2:ee:c7:
                    fb:17:9e:65:83:ac:87:89:c9:9d:f6:da:c6:4b:f0:
                    ea:7a:aa:27:57:f3:6e:47:0c:7c:27:43:ee:27:db:
                    9b:d3:6a:8e:1f:e9:17:99:ba:6f:00:8a:cf:fb:7d:
                    bf:0e:92:ab:95:ff:fb:9a:4b:17:36:11:9c:cc:f2:
                    4f:24:5a:2d:df:7c:5e:14:80:8a:69:2b:b0:13:19:
                    1d:be:99:81:ea:34:38:db:49:62:a3:90:76:6e:97:
                    ea:5e:57:b0:9c:25:a0:ff:86:97:52:81:00:14:c3:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A3:A9:BE:77:E2:D9:FD:E7:FF:E1:F5:16:29:F9:4E:98:EA:3C:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dd4148-89ab-48f8-8d6f-33cfa511b0c7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dd4148-89ab-48f8-8d6f-33cfa511b0c7/1/tKOpvnfi2f3n_-H1Fin5TpjqPNg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34699

    Signature Algorithm: sha256WithRSAEncryption
         01:18:38:d5:1e:85:cd:d4:6f:85:53:af:13:a0:ab:bf:f1:55:
         ae:ab:4e:22:b9:b4:16:37:f6:b5:65:3c:6e:2f:f8:08:bc:bb:
         ea:0f:24:ed:1d:16:8a:64:bb:02:78:c8:c6:72:04:c2:1d:e4:
         94:fc:5b:43:72:6c:56:70:93:19:40:c8:ec:82:c0:68:03:3d:
         d2:81:39:18:96:51:d8:db:a7:01:87:14:78:f3:d1:00:23:33:
         97:c2:f5:0a:3d:1b:25:d3:95:e8:75:63:c4:6f:28:89:98:00:
         fb:7b:20:fa:14:71:00:f8:b6:74:d7:39:39:d1:57:5b:e5:48:
         1c:5d:44:a3:95:78:61:fa:6c:95:1d:7f:6e:60:95:9e:1b:41:
         94:ae:ee:61:3c:e7:dd:91:51:12:19:9f:e7:9c:4b:1a:af:bd:
         f9:07:18:2b:0c:62:e5:cc:71:d7:c6:4a:7b:b9:98:42:96:0e:
         47:0a:d9:d2:dc:9b:40:e6:91:ec:ff:36:ca:b6:a5:1e:7b:3d:
         de:b3:eb:45:73:3f:95:b2:68:31:fb:e9:fa:03:be:4d:71:c7:
         08:1f:86:1f:de:06:58:38:3d:1c:d5:03:52:47:b5:5d:f3:07:
         86:88:b9:f7:68:93:bf:61:97:82:51:91:02:8e:c1:7e:06:dd:
         a7:24:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----