Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
File:                     4z5VR668F6SCuM0e6BfdjO_2o68.cer (raw, json)
Hash identifier:          XIfaR0/LwaqkmplwP4P0g90DtPlYdtF8Qik5sHnIfbA=
Subject key identifier:   E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA34C7CEDAF2ABC415F22B1D4D46A5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44330
                          IP: 185.214.92.0/22
                          IP: 2a0b:9ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:34:c7:ce:da:f2:ab:c4:15:f2:2b:1d:4d:46:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:97:77:81:c6:e4:7d:1f:09:6a:53:75:94:13:
                    bb:17:63:6c:f7:5c:d0:55:f7:c6:6c:93:12:fd:47:
                    1b:34:b9:60:dd:a5:7a:1a:18:6c:c9:44:99:9f:28:
                    99:68:55:af:3b:42:ad:01:21:31:ef:ca:a7:e4:bf:
                    49:df:92:3c:35:f0:ef:b9:06:cc:a9:12:db:08:b2:
                    07:59:33:4d:80:af:bf:40:1b:c6:e7:d7:b8:6a:dc:
                    0c:b6:89:2e:27:7d:3c:06:c9:41:2b:7a:1b:66:5e:
                    92:d7:d3:e1:5a:ec:6a:32:f8:ed:13:09:71:a9:54:
                    26:8f:b1:49:17:0e:d7:3d:4b:d4:dd:5b:74:4d:41:
                    50:47:a6:0c:aa:09:d0:d3:01:2a:f1:7e:ba:bf:54:
                    09:2f:16:92:2a:d2:ce:dc:15:82:42:01:59:cd:00:
                    de:4a:1b:ce:61:37:1a:88:d4:47:cc:c1:cc:19:5b:
                    28:69:78:32:7a:2a:d0:6a:ff:4e:d9:8b:ce:e6:9e:
                    a4:c4:b8:f3:af:93:a2:0b:c5:3c:58:f8:d5:56:09:
                    a1:c6:ae:03:98:e1:49:95:f8:25:0a:f5:82:ac:e5:
                    93:b9:76:a3:ea:2e:f8:64:26:8f:37:4a:91:6e:f6:
                    9b:a3:af:8d:fc:cd:1e:8f:17:af:71:a3:e2:26:12:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.92.0/22
                IPv6:
                  2a0b:9ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44330

    Signature Algorithm: sha256WithRSAEncryption
         a8:4a:a9:4c:e5:07:d1:b4:0e:ef:f3:49:13:6c:2d:06:8b:d4:
         d8:a2:9a:21:e9:e5:03:3e:bf:04:f1:6f:66:68:15:66:0d:aa:
         ef:64:54:19:e5:9c:b8:86:5c:ab:85:0e:56:a6:fb:9e:99:f8:
         be:50:f9:2b:55:b4:cb:62:ba:04:cd:69:ff:d9:04:2f:b6:b5:
         1f:3a:b0:8e:38:da:d6:87:de:b5:83:58:dc:77:5b:68:f9:b8:
         e5:ad:d7:54:f4:6a:a4:1d:8f:89:88:86:9e:75:53:bc:e7:06:
         38:22:b3:ce:b4:38:bc:8b:da:a7:16:d8:ab:e5:52:84:46:13:
         75:87:d8:42:71:53:e5:cd:51:15:fb:55:af:bb:bc:7b:e3:a5:
         0f:9f:1e:b1:5e:ce:03:13:ec:d1:97:79:44:f7:80:ac:4a:17:
         47:8b:5b:9e:f6:8e:be:b8:69:36:0c:ec:cb:cf:18:76:8d:93:
         7d:f1:bd:89:6f:59:7c:94:2c:6b:92:ce:cd:33:01:6d:41:4f:
         c5:77:70:01:1c:eb:c2:15:18:b0:fa:c2:1c:05:8b:60:d6:30:
         7c:67:32:a7:6c:9d:c6:74:f2:5c:69:e6:ce:b8:66:46:9e:4d:
         bb:d9:d0:3b:39:e6:96:80:88:6c:19:b8:47:d9:04:a6:20:62:
         b3:b9:ed:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----