Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
File:                     vEwRj9Pu4hW2w_173dXCod42MwI.cer (raw, json)
Hash identifier:          FTwwf7719j999o6+4y/oN1QLLyAlKZTglvVBsl9BfAc=
Subject key identifier:   BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F19E2513AECDF7D86BF3880415B31
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211180

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:19:e2:51:3a:ec:df:7d:86:bf:38:80:41:5b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:f1:a6:44:27:bb:7d:d2:13:6e:72:97:16:
                    87:00:f1:1f:4d:af:20:29:5f:39:3f:a2:58:38:91:
                    12:54:58:5e:66:f5:b3:13:93:89:43:76:de:52:8d:
                    6a:dc:15:57:e2:42:a2:bb:13:0d:71:cc:37:0b:eb:
                    a0:99:b1:09:2d:8d:0d:9a:7c:1b:b1:d4:97:4a:1c:
                    55:27:97:bb:36:b1:5b:d5:65:ae:18:0c:00:0c:0e:
                    dc:69:8b:1a:39:33:dd:ab:e8:bd:61:47:8d:8a:0a:
                    23:64:35:60:6a:b5:66:0b:6b:eb:61:01:8f:86:08:
                    7a:c0:d4:f0:a7:80:26:86:cf:34:09:e4:8c:d5:ac:
                    57:3b:7d:69:fd:16:7a:77:99:ea:c1:2f:d0:1e:81:
                    26:e3:eb:9a:9f:a1:bf:69:49:3a:b5:30:12:2c:68:
                    8f:c5:05:f5:60:f2:3f:ac:2e:67:45:c1:3b:59:89:
                    92:22:b6:33:b1:85:80:93:df:22:79:2f:f9:36:06:
                    4c:35:ba:00:c6:81:0c:30:f9:ed:5f:ef:dc:c0:33:
                    b2:86:20:6b:3f:e9:9c:87:b7:0e:be:dc:71:7c:cc:
                    6c:24:23:78:07:97:7c:c8:f2:5a:84:82:59:dd:3f:
                    8a:cd:39:9a:2b:da:53:53:13:14:6d:41:a4:84:17:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211180

    Signature Algorithm: sha256WithRSAEncryption
         19:35:42:38:e1:ef:75:dc:66:07:7f:1a:e6:b6:67:fb:fb:cc:
         c3:77:f6:b7:db:28:fa:f8:21:8f:93:32:75:27:3c:55:78:b1:
         6a:7f:4a:b1:5e:72:a1:7f:07:2c:7c:65:19:5e:b5:67:d2:ce:
         dc:c3:b4:cd:bd:d7:43:48:95:69:40:e5:1c:13:d2:e5:89:06:
         26:8a:97:07:b1:fd:58:94:f4:7f:c6:21:01:8b:b4:3e:2e:ed:
         e6:64:98:84:cf:71:5f:e2:b6:45:14:64:1e:1a:50:00:9b:c0:
         ab:fe:33:8f:74:e5:62:0c:b4:fe:2b:47:13:29:fb:a5:17:9c:
         49:cd:fe:21:5e:2b:3c:08:9e:dc:25:d7:b3:7c:14:14:e0:ea:
         06:7a:76:c2:84:ea:73:f2:33:bd:c7:cc:89:b5:69:55:49:28:
         d7:a7:79:40:30:d9:b5:3a:87:e7:34:6c:47:69:4e:a2:b8:4a:
         cd:42:cd:ef:89:5c:eb:c7:83:0c:4f:b3:58:41:f4:32:72:62:
         c3:3b:8c:26:07:58:67:d6:99:3f:a5:a5:d2:72:df:7a:51:01:
         0d:1a:90:0b:f3:92:97:29:f6:90:d8:de:c7:ea:47:64:3b:d0:
         f8:3e:9d:98:1b:4b:57:07:24:5a:c4:5b:f0:39:3d:6e:c2:f3:
         6a:34:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----