Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
File:                     5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer (raw, json)
Hash identifier:          wfqhgPszT+vBDj+caWL4xy2D+JYbA7v7pZF4sozQEgE=
Subject key identifier:   E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D621572B7B27875754FC83998ADCD5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204576
                          AS: 208649
                          IP: 185.75.221.0/24
                          IP: 2a0d:a640::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:21:57:2b:7b:27:87:57:54:fc:83:99:8a:dc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e7334ad9b3fc521030be99a5157211b663216c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:77:39:14:c3:50:39:de:9d:db:95:dc:04:
                    19:ec:e7:45:3f:84:0e:89:1b:43:6a:7c:ba:8c:e8:
                    95:86:4a:6e:a4:22:f8:cb:12:f2:09:66:76:39:3a:
                    34:e3:61:06:88:b0:6a:12:94:4c:67:b8:6f:22:96:
                    e6:ac:03:08:d5:b3:16:30:c2:b7:69:b4:f3:db:69:
                    af:f8:35:48:71:9c:1c:29:19:87:66:62:9b:d1:52:
                    f1:ad:d8:40:df:a7:b1:62:72:99:98:5e:1c:a0:bd:
                    00:ae:25:5d:39:3e:e8:8f:ec:cd:24:18:52:bf:b9:
                    7e:82:c0:90:bc:47:54:68:b0:4f:bf:d5:a5:d3:01:
                    f8:fd:47:7b:01:0d:74:c5:97:0c:c2:c0:4b:34:1f:
                    e4:0f:8b:57:d0:11:08:a1:a5:89:df:70:42:ca:13:
                    e7:e5:fe:bb:3b:f6:9f:cd:57:c0:f6:7c:58:c5:5a:
                    c9:c8:11:68:30:8e:83:ba:20:08:43:3c:59:50:00:
                    07:3e:aa:6f:47:63:31:65:f6:92:45:d8:ab:81:ee:
                    b7:14:f8:11:b1:d1:e0:9f:cc:b4:46:8f:35:5b:b2:
                    58:52:64:1c:d9:d8:bb:76:31:69:cd:5f:23:f2:1c:
                    e5:fc:28:00:14:48:12:15:05:3a:e5:dc:c4:93:76:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.221.0/24
                IPv6:
                  2a0d:a640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204576
                  208649

    Signature Algorithm: sha256WithRSAEncryption
         01:a5:96:4c:fb:0d:fa:c6:df:79:f7:bf:d0:ba:a8:77:7d:c7:
         62:d9:3b:7a:01:30:f9:5f:0f:ec:3d:88:98:2a:c8:13:28:ba:
         5c:fc:71:7e:b3:71:93:2d:0b:eb:d2:26:4b:7b:b1:20:07:a3:
         0c:9e:6a:d2:2a:cc:13:65:ef:0b:ad:f6:f1:da:9f:8d:cc:85:
         5f:8d:1b:a2:a5:1f:0f:a5:47:74:1d:c2:34:19:04:d2:0a:77:
         60:63:b1:84:c8:21:a0:75:2a:49:b5:c0:ed:6f:64:c6:a3:49:
         df:91:31:7b:b7:7e:7e:40:3d:d5:55:ad:fc:f6:0f:70:39:7b:
         bd:91:87:8d:14:a9:2e:e7:a9:2e:c0:06:51:ac:8f:a3:ea:58:
         12:ec:a0:58:a4:99:b5:2a:31:99:b9:c6:71:55:5a:45:47:eb:
         3d:66:9a:14:fd:5d:09:82:c5:b5:dc:22:53:3e:83:c0:40:5c:
         93:b3:0e:98:47:38:7d:06:88:07:39:b6:dc:48:db:2f:56:15:
         cb:f0:2f:50:66:1c:4c:e3:c7:eb:ec:4c:04:7b:15:8c:20:ae:
         d0:42:8c:72:ab:8d:66:27:c5:35:4b:3b:6c:e7:18:d9:ab:63:
         93:22:19:8e:19:55:38:06:91:93:09:26:4b:8f:41:06:e6:9d:
         a0:0c:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----