Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
File:                     E6-mzmVC4btSPh0DvQCk0it_2u0.cer (raw, json)
Hash identifier:          qsDzPO2B4gyhIwrnEI1ppvOiMLhLCGkUh+a7l4lfqPw=
Subject key identifier:   13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747B61ACD4E811B8D35D7D4966867DE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211417
                          IP: 185.144.92.0/22
                          IP: 2a03:a920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:b6:1a:cd:4e:81:1b:8d:35:d7:d4:96:68:67:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:22:b7:e7:e5:36:d4:2f:1b:a0:1e:c6:bd:
                    86:a7:a0:12:af:88:67:bc:b6:30:fc:aa:b0:0a:86:
                    8b:fa:f7:b4:6a:cb:90:27:43:d6:00:c1:f2:d0:a2:
                    56:1c:96:24:5e:81:04:3a:49:56:5e:35:66:9b:ac:
                    35:1f:3f:d8:bb:35:79:58:97:38:ad:64:85:78:c0:
                    67:86:b3:bb:6a:49:63:8f:65:11:5b:f8:97:4b:de:
                    50:46:90:1a:02:a7:81:57:15:71:b0:11:1d:40:22:
                    31:19:a2:f3:68:bd:9b:c7:c1:88:1c:e3:ec:19:54:
                    af:c9:7e:de:87:3b:38:90:7a:ff:6a:31:dd:6d:af:
                    06:a8:ec:14:7d:21:43:60:dc:0e:55:43:1c:0f:0b:
                    4f:66:d8:8e:fd:e4:d9:ed:eb:91:07:0f:46:45:f1:
                    78:27:6b:01:20:de:8c:54:98:35:8d:e4:30:82:03:
                    b1:f1:87:f9:8a:2c:49:fc:33:ae:82:6f:e2:98:99:
                    6c:d3:c4:a6:d6:35:48:d0:1f:fc:c0:65:3d:a9:c3:
                    6a:1a:11:59:60:a7:07:56:ec:03:1a:ba:cf:a5:0d:
                    4b:47:de:85:f1:07:69:f7:d3:7b:9d:cc:49:bb:d2:
                    c4:9c:46:6b:7c:0b:78:77:22:0c:75:ac:5a:91:95:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.92.0/22
                IPv6:
                  2a03:a920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211417

    Signature Algorithm: sha256WithRSAEncryption
         4c:fa:94:61:0d:fb:a7:39:70:fe:e7:7d:aa:2c:98:4a:7b:17:
         4e:ea:7e:aa:3a:ea:02:4f:2d:c6:9a:bc:47:99:f8:f6:dc:f2:
         74:4e:1f:63:98:bc:a6:35:70:be:39:f3:76:a6:ff:0e:70:0d:
         9e:7d:bf:10:0a:f5:5c:1b:7f:4a:0e:1e:4d:23:92:92:36:ba:
         ce:b1:eb:ea:05:26:6b:38:7a:18:d8:5f:ca:5a:0e:6a:c9:3b:
         18:0f:51:b9:23:83:5f:d9:75:f5:24:52:41:37:fd:db:a0:25:
         5e:80:ce:22:d5:96:b7:e8:e3:3f:38:11:5a:99:b8:7d:42:a7:
         0a:a4:15:5a:17:5c:ad:88:94:f2:7a:2b:fb:6f:05:e2:7b:a9:
         19:53:c3:de:d6:2b:d5:8a:54:44:e0:0e:c1:60:b1:10:85:b3:
         e6:d8:90:cb:5e:f1:8d:ec:ce:08:52:83:1d:c8:2e:f4:6e:8a:
         ac:52:5e:2b:e7:3e:d3:c6:e8:10:f8:e1:e3:cf:c7:e7:2c:0e:
         b5:ae:3f:c7:3c:a6:f6:cf:10:c6:dc:95:4e:ed:6a:21:00:bd:
         27:56:04:3f:51:af:41:d6:e1:a4:b6:90:cf:12:4f:66:a4:81:
         b3:3a:3b:db:59:70:ca:92:b5:35:89:d9:82:8d:89:5a:5a:34:
         2f:a7:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----