Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
File:                     wpN7lGGj0mbpNYNOUEehgiODYsg.cer (raw, json)
Hash identifier:          ir4cJJl5TtxpoLReAzvupgLQveio+RuRDEdOXUl9fjg=
Subject key identifier:   C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B2437F5E8392C26D8178511049D5CD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204228
                          IP: 2001:67c:24d8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:43:7f:5e:83:92:c2:6d:81:78:51:10:49:d5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c2937b9461a3d266e935834e5047a182238362c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:de:86:21:56:ce:6e:b9:bb:32:d4:89:69:
                    f2:2e:d3:2a:25:51:a5:e7:0f:ae:52:fe:85:27:e6:
                    e9:14:36:d7:f8:b7:d1:b6:a3:a1:63:3c:98:2a:0b:
                    1a:e7:d0:a7:70:43:70:5a:4c:8c:15:e1:30:7a:03:
                    a7:fd:68:d6:36:cf:6f:3c:09:5f:de:a1:50:84:14:
                    68:b3:1f:91:27:d4:64:8e:f2:24:1f:65:1e:34:18:
                    28:7d:fe:02:35:01:d1:74:18:62:e7:b9:66:85:3e:
                    29:42:07:b3:b9:34:9d:ed:88:9e:af:11:d0:bb:d8:
                    33:f8:02:5e:7f:97:51:39:1c:16:6b:69:bf:ba:8d:
                    4c:55:97:34:8c:70:e8:57:87:bc:71:86:05:b0:62:
                    b8:7b:87:bb:8c:08:b4:00:46:47:4c:ce:50:e6:cb:
                    d4:ff:b6:da:a8:f9:1f:3c:60:26:8f:3f:2b:0c:a8:
                    0b:12:af:58:5c:a6:a5:9e:4c:21:87:47:25:ae:70:
                    03:db:06:10:8c:cd:27:29:fa:5a:2f:4c:c8:5d:5d:
                    c6:9e:e5:33:a2:92:60:bf:23:89:3b:38:ed:a5:16:
                    9e:28:5a:d3:3a:7a:5c:fb:86:9c:90:fe:bb:91:dd:
                    90:95:55:76:f6:5c:97:72:3f:d3:d9:58:83:45:3e:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:24d8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204228

    Signature Algorithm: sha256WithRSAEncryption
         36:2c:37:a1:77:e0:e2:17:b4:c3:f0:ea:ff:ae:ff:6b:35:6c:
         32:fd:60:b8:5a:b3:d8:5d:52:66:cb:52:2c:ab:5e:ea:d0:6e:
         7f:54:ad:a4:92:11:aa:a3:e1:43:bb:48:a4:41:4e:97:13:fb:
         29:91:61:37:ff:4d:e2:07:c0:3f:ac:7d:72:23:5a:1a:4f:72:
         51:a9:22:9e:2f:ac:b9:6f:1d:e6:0b:9e:3a:cd:2c:3e:ae:4b:
         7c:d5:cd:31:ea:30:12:ee:e8:40:c1:ef:c0:0f:a6:95:ab:5b:
         82:1d:76:b7:ce:69:a8:cf:c5:06:54:af:14:df:7a:b4:95:fe:
         26:92:c4:6f:4c:aa:57:31:e8:1c:68:98:ce:28:85:63:5e:54:
         e3:3f:6c:d2:a8:5b:b8:5f:0c:df:c1:81:3b:12:e2:82:aa:b2:
         d3:5c:33:c9:eb:63:a9:6e:3b:1e:10:c2:98:5f:26:74:6f:a6:
         65:db:bf:13:2f:ec:06:3b:65:0d:70:8b:f8:cd:ab:5f:6e:f8:
         bd:8f:94:b4:86:3e:0f:e7:01:c3:32:73:b2:51:99:a4:8a:af:
         ea:0d:0c:fe:70:61:4e:cd:e8:1f:cc:0f:93:c5:f8:dd:4e:f1:
         74:2f:cf:71:45:41:6f:05:f7:8e:17:31:c2:c0:91:1a:d7:d6:
         20:2f:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----