Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
File:                     2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer (raw, json)
Hash identifier:          Ec8MpVGq5SOzuHe/Wzp+vUTArFqn2Ujyt2hfXm+DOLM=
Subject key identifier:   D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01955AFC8BF9C55AC47B1E91189F2109EE58
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 03 Mar 2025 07:50:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51759
                          IP: 2a02:d380::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:5a:fc:8b:f9:c5:5a:c4:7b:1e:91:18:9f:21:09:ee:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  3 07:50:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:e5:5d:22:48:d8:c2:91:74:e7:d0:59:a6:
                    58:e9:73:c4:ad:b8:05:1c:7d:74:6c:ef:2f:6a:ce:
                    65:ba:d4:14:54:76:09:fe:1b:7b:6d:76:26:b9:db:
                    c6:1a:de:90:1b:8d:4a:35:88:0d:c7:f9:9f:73:05:
                    c1:5f:b2:7c:ab:26:b1:53:42:b5:6b:e9:8c:50:9b:
                    02:b9:0c:34:de:c0:ad:86:34:c6:6b:cc:f5:96:cc:
                    3f:a9:c9:fa:9b:26:35:a9:73:54:b9:57:1c:31:81:
                    b3:2d:9b:5b:61:f3:33:39:ca:ab:21:3c:50:da:a7:
                    2c:dd:89:60:72:b6:7f:69:7d:04:84:5c:9d:1f:ca:
                    dd:c4:39:84:1c:5a:a8:fb:5f:4e:a4:11:0e:88:fa:
                    2a:53:5c:96:bc:36:dc:8e:89:01:e5:e4:28:ee:ae:
                    91:1b:4d:b5:3b:e9:eb:40:0b:35:90:7f:0d:b5:75:
                    37:5d:9b:47:60:42:47:53:8a:45:96:fe:f2:95:5c:
                    ea:1e:b2:6a:fe:70:7d:76:b1:19:90:58:fe:35:0e:
                    a9:f1:b8:6e:2d:47:16:3d:0d:59:5d:5b:d0:83:49:
                    f5:ad:8b:dd:9b:29:2b:f0:f9:f4:1b:02:cf:ad:92:
                    4b:64:c1:0c:bb:dc:26:80:8c:71:0e:5e:ea:6c:48:
                    56:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:d380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51759

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:ba:8f:0d:93:4f:3c:e1:cf:8e:ff:5f:4f:40:81:00:13:
         b7:ee:ed:ad:b7:30:d2:56:9e:0e:79:1f:6e:5e:6c:1b:5a:07:
         3b:eb:23:9a:ae:d0:21:24:02:93:bd:17:3f:4a:47:21:a0:49:
         43:6e:a5:8f:6b:aa:97:6f:65:fe:9d:e1:1c:6b:4f:0d:5f:24:
         9d:78:d3:cb:8a:01:2d:10:08:de:d2:63:80:0c:67:a7:b6:0b:
         12:71:e2:dd:f5:88:f4:11:54:5e:e2:e0:35:1d:19:8e:f9:7c:
         00:83:f3:e8:5f:62:e2:66:1d:a8:f8:22:75:f1:ea:9b:27:44:
         98:7b:77:0f:c2:9b:2f:e3:de:ff:05:7a:62:43:d1:ea:49:61:
         31:10:18:74:44:d4:33:04:c7:bc:c9:9e:fb:44:72:a1:4f:66:
         d6:ac:85:7f:87:59:22:2b:c3:8c:79:7b:bc:58:7b:a6:04:d6:
         24:05:f0:6e:a1:72:f2:7d:ec:6e:c1:57:06:12:3e:9b:61:ec:
         41:9d:d4:da:9d:d0:41:ab:1d:10:28:d9:d2:c6:d9:fc:83:c9:
         18:16:a4:d2:e7:55:1c:b1:77:d0:ee:29:92:22:7d:6a:53:71:
         d6:a9:be:d7:fa:ab:65:b1:fa:69:56:85:f8:c5:05:f9:09:bf:
         17:84:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----