Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
File:                     KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer (raw, json)
Hash identifier:          AVD3E/VNhY6uE3IzcZrgdGOj6kOj0wBWa8wuSRPJcFY=
Subject key identifier:   29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01957FF27D113CEE3CE1577659E68E86A05D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 10 Mar 2025 12:05:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211707
                          IP: 185.19.34.0/24
                          IP: 2a13:91c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7f:f2:7d:11:3c:ee:3c:e1:57:76:59:e6:8e:86:a0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 10 12:05:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:1b:7e:1e:c9:b3:b8:94:3b:6d:7e:0b:f0:
                    54:e3:b9:e4:51:6c:41:05:64:aa:ed:fc:39:31:46:
                    f0:34:3c:9d:4c:ba:1f:27:9d:20:ce:63:e3:b3:36:
                    03:1a:cb:86:cd:b8:02:ec:5c:40:03:26:08:58:e4:
                    16:c6:6e:e5:2c:59:06:c3:44:cd:ab:db:f3:11:36:
                    b2:b6:e4:b1:25:df:cf:b3:37:80:3a:ce:e5:8b:be:
                    3b:43:be:8e:4c:45:ce:2c:2f:80:91:3d:ef:d7:64:
                    32:68:c8:ab:56:f4:3a:c4:60:30:9e:08:de:10:88:
                    44:c0:15:a0:55:70:a0:43:9c:cc:93:cc:85:ef:aa:
                    8e:28:a6:ae:cc:24:a5:ba:0a:48:17:fa:2d:50:cd:
                    0b:a6:88:82:24:1c:88:29:3e:f0:eb:d2:cb:d3:2a:
                    65:d8:e9:68:e2:03:fa:70:60:1b:c4:c0:f4:15:f6:
                    f9:95:1c:29:ae:57:25:4f:ce:5a:8e:bc:f1:78:26:
                    e4:29:55:32:ca:3f:d1:24:32:3a:d0:a5:89:a0:83:
                    b1:93:e3:ed:af:84:18:8b:8a:3e:da:76:9d:27:e1:
                    d5:42:50:15:cd:9c:19:e8:9b:f4:93:07:f3:b7:69:
                    79:30:f7:17:ff:49:67:6f:e9:b5:b4:71:b0:fd:7b:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.34.0/24
                IPv6:
                  2a13:91c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211707

    Signature Algorithm: sha256WithRSAEncryption
         94:34:e8:fc:0d:e7:90:33:3c:8a:46:31:4b:11:a7:3f:16:7a:
         7d:d6:c2:01:d4:78:f1:39:0a:a1:e9:93:a0:ad:8c:46:a3:1d:
         b9:1b:94:f8:e9:a1:6f:97:61:49:2e:86:3f:4f:ee:4d:97:4e:
         b7:5a:f1:8b:0e:7e:66:42:3e:18:46:9f:ef:2b:2c:1a:98:e6:
         8b:a6:e0:17:9b:b8:3b:03:d3:83:45:98:11:a8:92:ff:fd:88:
         1a:fc:6f:42:5d:f4:6f:76:8a:0a:9d:91:82:25:49:04:38:11:
         6d:7f:7e:82:22:68:56:ac:f8:35:76:5e:4f:b6:69:02:6b:a6:
         01:69:93:c1:59:87:92:f2:9c:33:53:39:bf:dc:d5:b1:ba:87:
         c2:3e:2f:ff:bf:7e:86:98:c5:77:72:88:43:ba:bf:95:c0:0b:
         43:8f:01:95:6d:39:5c:b5:59:72:e5:d7:ec:6c:b2:7f:ff:30:
         bd:78:27:4f:65:aa:b1:7c:b2:53:bd:d8:a2:e7:e9:f8:52:15:
         9c:40:ae:31:80:e8:8a:79:5f:84:0f:d3:7f:f2:89:52:ae:c5:
         c7:48:1b:4b:bd:98:fe:99:ac:f3:bf:b3:e0:c5:ee:67:d9:9f:
         c6:4b:eb:47:7b:fd:31:cd:be:d7:e3:36:9b:56:5a:9b:c2:cb:
         78:fc:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----