Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
File:                     WZp0D0vDCiwEzcszRK8Nai0FpIE.cer (raw, json)
Hash identifier:          3TffIgsepETmEbm6/jlJOYP+a2hobR81aCwnF1tfcuY=
Subject key identifier:   59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B494BE361010614AF9E21AA3CE3874
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:48:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57295
                          IP: 2001:67c:2ba8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:94:be:36:10:10:61:4a:f9:e2:1a:a3:ce:38:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:48:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:88:57:d7:2d:51:19:42:78:d0:ff:4c:68:
                    76:84:85:b4:58:b0:d4:4b:95:9b:88:f3:1c:cb:ca:
                    aa:8e:c5:fd:b8:67:5f:a6:03:e6:60:26:fa:72:e8:
                    b1:28:70:4d:c4:81:c5:79:1a:d1:0e:1b:55:ba:47:
                    a6:13:c7:ce:a9:df:d8:85:b0:c0:68:7c:68:52:69:
                    55:be:87:09:d0:e3:57:1d:ad:12:a8:10:17:b1:be:
                    42:0f:8a:24:ff:bc:6d:b1:43:e6:2a:c2:4a:43:0e:
                    97:5d:9c:68:cc:8c:e0:3b:ba:11:21:2f:6f:73:e8:
                    76:54:cc:9e:8f:0b:a8:48:db:b4:d2:81:71:25:41:
                    e9:14:73:19:1e:ae:61:a6:c6:b6:aa:10:80:69:79:
                    c7:8e:23:0e:90:19:e8:0e:14:8d:a4:42:cd:86:f4:
                    27:57:39:01:64:a3:b9:b9:20:59:c6:6a:0a:a9:b7:
                    5c:01:f7:96:45:2f:be:b3:d1:02:df:d4:e0:09:1f:
                    7d:47:b0:80:62:0f:59:5a:72:8a:f0:40:b8:f2:bf:
                    82:9b:63:61:18:81:f6:59:81:10:de:38:e2:9b:ae:
                    d0:e0:a2:3a:72:74:d5:d9:c9:b4:b8:30:b7:66:2c:
                    ae:62:c6:a8:28:66:a0:70:27:f1:7c:35:f0:3e:cb:
                    c7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2ba8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57295

    Signature Algorithm: sha256WithRSAEncryption
         4d:52:99:24:cb:b4:2f:e0:05:09:b5:81:66:ab:30:8e:91:90:
         37:f3:0e:c2:9e:45:c4:df:f0:5b:4d:45:fb:32:c0:aa:80:36:
         42:b0:c8:fe:55:b9:ea:c0:4e:80:b7:67:b3:4b:de:40:5b:a2:
         71:57:69:ae:83:56:0c:33:47:c6:cb:31:f9:07:86:23:a4:67:
         c0:e8:9b:52:7a:d5:e7:22:25:92:de:12:97:83:f3:fd:f0:a5:
         f6:44:90:60:e1:70:44:7e:d8:d0:17:ff:ba:d6:66:a7:a2:16:
         1d:77:14:f4:53:b9:6a:9b:6b:0b:8c:69:c5:77:4d:d2:f9:57:
         d0:12:4d:be:8c:c1:41:60:af:83:47:b6:e5:cc:99:01:a3:76:
         c4:62:62:fc:95:23:ab:d4:b5:3e:8c:6f:8f:fe:e0:f6:95:16:
         64:5a:c4:0a:2f:eb:1f:ac:7f:0b:09:12:75:62:de:7f:26:9b:
         48:5f:01:ea:67:29:a2:63:16:e9:e9:4f:6f:0b:46:cc:91:29:
         d4:d3:90:51:f8:b0:ac:e0:cd:99:cb:12:ac:b8:4f:39:e9:3d:
         82:f5:02:9f:9a:13:c9:2f:73:29:8e:3e:5d:f6:19:0a:d4:80:
         0f:bc:b7:de:16:76:2f:2d:47:40:74:df:8a:33:de:4e:28:f0:
         7a:09:24:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----