Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
File:                     XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer (raw, json)
Hash identifier:          AUXBdelcURYMao0oFzhhSZK70KVqvBRW2nb3/ocARdo=
Subject key identifier:   5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424457C54C32C78B70F4224FD5B8C8406
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42936
                          IP: 91.193.64.0/22
                          IP: 2001:67c:13c8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:7c:54:c3:2c:78:b7:0f:42:24:fd:5b:8c:84:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:13:ed:c6:d2:b5:91:a0:cb:68:df:6f:30:
                    00:50:ff:2e:70:b5:26:3b:aa:69:00:3d:92:96:b2:
                    8b:6d:9d:5c:53:32:c3:b6:e3:e6:44:9b:11:23:bc:
                    70:f1:e3:38:ad:42:95:99:92:ad:ec:0a:d3:13:a3:
                    40:4d:6e:61:2a:e1:40:95:d2:c3:87:d6:23:1e:ba:
                    c3:3c:1b:c2:ab:53:6f:4f:d6:b5:85:8d:2e:c5:42:
                    0d:3b:93:39:ec:94:e9:89:09:eb:b4:ec:8f:d6:c2:
                    3f:04:4b:1b:a0:84:9a:45:9a:e1:eb:8e:66:c2:35:
                    c0:14:0c:c8:10:cf:9e:be:24:17:97:91:cc:b3:95:
                    78:00:6c:85:71:07:b9:a4:fa:91:06:26:70:4c:d9:
                    41:79:ad:ca:35:0b:df:3d:50:dd:63:8f:53:78:3e:
                    a4:04:19:ff:7d:3d:ba:36:28:69:05:bb:62:d3:ac:
                    be:4e:3b:de:11:ed:d2:a0:c3:ca:2f:05:fd:a0:1b:
                    83:b8:f0:9d:1e:43:69:1a:91:ca:3e:f6:d9:d2:b8:
                    3b:be:ba:0a:cd:81:73:24:5a:d6:5a:b4:99:68:76:
                    04:79:94:1d:81:b7:df:4c:31:a6:e9:e6:e9:c3:d8:
                    fe:67:bc:f3:42:c1:37:55:ba:4a:a6:a1:ab:15:6f:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.64.0/22
                IPv6:
                  2001:67c:13c8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42936

    Signature Algorithm: sha256WithRSAEncryption
         b0:fc:c3:17:c9:c1:5e:d2:e7:11:77:b7:51:92:c9:37:9f:bc:
         60:56:e7:f9:aa:c3:4b:24:e0:b6:46:21:03:ab:c8:31:fe:c4:
         18:da:26:b2:c0:58:09:d8:cd:78:df:bd:59:fa:8c:73:57:0c:
         05:62:e1:4e:bb:43:9b:10:6c:93:31:d0:b5:f5:f7:c7:90:75:
         da:47:4b:d0:a3:57:b2:6e:88:e5:59:66:4e:cc:a4:5a:76:14:
         ed:00:13:c7:f1:fe:8d:d9:7e:2b:19:39:7f:6d:0a:1c:bc:63:
         37:cc:70:b6:ad:ac:1c:60:06:68:5f:c4:be:c9:eb:68:60:06:
         98:1c:8f:a9:1a:87:85:90:16:a6:eb:05:05:ae:b7:a4:7d:fc:
         11:ec:b1:e7:4c:ae:84:96:f1:b0:ac:a4:29:96:63:d9:fe:28:
         2a:37:d7:8c:fd:f9:02:3a:bf:72:87:92:cb:7d:ae:cb:3a:43:
         3a:ba:9b:2f:26:fc:b6:5a:9a:fe:7d:24:91:77:70:38:d9:72:
         11:00:92:3b:2e:8a:18:e2:c6:ff:a5:4a:a5:2a:30:68:fc:50:
         eb:d4:71:ac:02:51:ab:32:8a:71:34:38:9b:f6:82:01:94:b7:
         ac:fb:74:31:df:6a:ea:14:03:89:80:b3:29:0b:0e:0e:7a:a6:
         a5:61:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----