Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
File:                     xI7JWf3qj9yJhS1C1QYi2C1soSw.cer (raw, json)
Hash identifier:          C9TT473cz6zmG0U864umQZgzyxnLOhAwCPXacLFgLLo=
Subject key identifier:   C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDE3B5914C57F2B03D6454DF0909E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 31553

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:e3:b5:91:4c:57:f2:b0:3d:64:54:df:09:09:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:ab:f7:ab:ae:33:85:0d:73:a7:4c:5c:0c:
                    8f:dc:60:cf:5e:91:28:f5:d3:b5:22:ec:f4:c9:84:
                    56:e5:85:3a:12:2f:e0:88:6d:0e:36:ca:57:9a:88:
                    0e:71:ab:99:39:75:44:e4:88:2f:55:da:ac:d0:6e:
                    64:5c:41:0f:d9:b9:85:e4:1c:ab:13:5e:25:ed:4e:
                    94:da:7c:8c:8c:49:ab:bd:60:51:da:ec:e9:2f:2d:
                    b4:3f:b0:e7:9a:b0:3d:7f:e7:1f:9a:3a:0f:18:6d:
                    8c:65:85:bc:c3:ce:2e:fa:4a:08:9d:96:de:20:3e:
                    3c:8d:b8:a3:b0:27:71:e5:53:c0:30:f3:9a:d4:bc:
                    ac:79:12:e2:a5:17:6d:7a:90:67:92:13:82:c5:f3:
                    9d:05:8b:06:98:4b:04:ff:38:eb:69:ed:18:7f:9d:
                    cd:be:17:64:27:6b:19:63:e6:4e:36:6e:40:29:fc:
                    32:e8:4c:d3:74:f5:01:4e:c5:74:d3:9c:cb:68:34:
                    c9:15:c6:fd:87:62:d8:0a:2a:99:99:d6:96:87:45:
                    71:da:0e:33:b3:3b:ce:b3:5f:5b:74:30:72:21:89:
                    d6:45:9e:eb:37:65:5f:5e:85:9c:c0:19:70:bd:ce:
                    24:0b:e0:37:4f:20:5b:93:02:bd:b5:55:ba:3e:d6:
                    4d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31553

    Signature Algorithm: sha256WithRSAEncryption
         7f:93:c9:31:bf:41:bb:c1:8c:1b:d1:5a:3c:56:eb:0b:93:ee:
         37:ed:50:15:3b:ba:63:6e:61:31:50:27:11:00:b7:d5:06:62:
         78:0f:5a:af:cd:d8:35:aa:34:69:d4:f7:3d:e8:0e:8a:19:c3:
         09:34:3a:2f:74:aa:80:2d:be:e0:c6:cf:85:b1:b1:29:0d:0a:
         cb:40:3b:53:a8:40:3e:65:f9:ae:55:bb:35:b1:00:ff:4b:9c:
         d3:df:d5:8b:c3:be:ae:b6:75:eb:33:0a:41:ad:f6:a1:91:92:
         dc:0e:cf:7b:c4:c3:ae:84:ce:d7:6d:c2:50:0a:53:98:13:3b:
         f8:54:db:86:52:0a:23:29:54:58:b1:31:82:01:6b:e5:21:73:
         25:1a:54:c2:d5:17:f6:f8:4e:99:63:20:b3:6e:cb:33:da:f8:
         b7:a4:f1:3d:03:c4:65:2e:66:c0:fe:3f:25:36:96:15:78:1e:
         3e:1a:b5:4a:0e:d9:ed:9b:6e:fb:a2:fb:07:2c:36:90:de:00:
         49:38:55:55:c1:5f:87:7b:d2:bb:ce:9c:5a:62:17:97:97:3a:
         98:2a:28:e3:d1:3a:20:55:2b:b6:7a:dc:35:f6:57:37:d0:46:
         51:11:2d:fd:f9:03:f0:89:d2:e3:7c:e2:60:16:0e:db:2e:90:
         69:b3:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----