Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
File:                     x9CAN66dCrMNEA0U2WFLeNY5Srw.cer (raw, json)
Hash identifier:          /JlX5oX805uyMq+SMInNXNxeY675FkQjORZX6+QGtPQ=
Subject key identifier:   C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01950A78EA645174B4119CC8404EBCE4980F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 15 Feb 2025 16:37:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213409

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0a:78:ea:64:51:74:b4:11:9c:c8:40:4e:bc:e4:98:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 15 16:37:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:b4:77:f3:4f:bd:8a:49:ca:c6:c6:e4:99:
                    00:16:e0:91:92:e4:da:c8:b9:8c:56:f3:40:a9:be:
                    cb:73:6a:91:b8:6f:26:06:d2:84:3b:78:d0:f1:85:
                    02:f9:32:5d:1f:b1:a3:13:49:7f:20:87:d4:55:0f:
                    19:cb:51:27:75:c4:c0:b3:f3:58:23:ba:a1:cc:ec:
                    9e:b9:cf:87:f9:7d:66:17:ab:3b:4c:d3:33:a9:0d:
                    46:2a:72:c3:da:90:cc:77:d5:a7:fc:a8:67:bc:c7:
                    b0:54:9c:b0:e0:69:32:e2:6b:2c:41:ec:55:ac:47:
                    ae:61:80:16:d8:ca:b1:0c:c5:44:66:bd:a9:ee:88:
                    49:45:10:3c:e3:ca:12:73:7e:4b:47:b9:c9:d0:81:
                    e2:6f:43:42:c3:6c:e9:58:dd:4a:89:3e:07:7f:14:
                    0b:a5:af:2b:97:f4:90:e6:0b:6a:4c:9e:e1:37:10:
                    3b:b9:d4:ad:68:c2:36:d3:0b:34:cd:11:06:a1:f3:
                    a9:00:a1:11:b3:a4:a8:e9:5d:1d:c8:84:c5:11:ee:
                    47:a9:87:9d:33:c3:0b:2f:b0:08:5b:38:42:7b:76:
                    6f:10:03:a6:e5:87:82:fe:ed:42:b8:d8:50:38:3a:
                    f2:06:2a:1d:a9:dc:c0:be:f3:7c:ae:b7:b2:7f:b7:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213409

    Signature Algorithm: sha256WithRSAEncryption
         2a:5a:da:a4:8b:ab:8c:77:32:2e:01:7e:0d:87:25:e5:a5:ad:
         82:a3:a5:3b:93:37:fe:f5:c7:d8:81:b2:3f:ce:78:a5:c0:1f:
         da:46:f4:ea:5c:95:48:d2:0c:35:06:f1:93:35:bd:cf:81:6a:
         45:c3:2f:a4:b7:a5:e5:8b:ec:32:bb:4a:f0:9f:73:8d:6e:72:
         cb:58:1f:76:5b:3b:a1:0e:4b:b1:09:f8:37:2f:2e:d8:69:23:
         63:04:4d:a7:80:0e:24:8e:58:aa:cf:9d:8f:8a:a5:80:56:a0:
         2f:cd:8c:43:8a:99:35:28:95:b0:3a:7b:46:82:8a:b5:aa:22:
         01:7a:2a:f5:c4:d4:bb:46:d1:48:3b:5c:13:9b:38:08:6f:e6:
         7f:31:1c:2c:b7:b9:bb:d0:a8:71:18:20:c1:df:32:66:d9:39:
         6a:50:1f:a1:a5:66:93:0b:f4:ec:5a:d0:f1:84:ab:45:2c:fc:
         9c:a0:97:87:6e:b0:e2:8f:64:bc:a9:e1:d3:c9:1f:8a:e0:c0:
         22:eb:cf:92:ec:fb:c0:57:ee:73:1f:63:65:1f:bf:f8:88:55:
         4b:38:82:4d:0b:8e:70:ae:a9:b1:62:33:19:f6:c6:49:1d:0e:
         b5:02:8f:53:f7:3c:49:e9:00:27:d1:d2:2f:dc:b8:93:40:24:
         be:89:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----