Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
File:                     Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer (raw, json)
Hash identifier:          1ymskC/WwYPhHqlIEOQv229z+uDnCScspHC5XDiwcFU=
Subject key identifier:   67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194D543C6BC2E8D8E323A4CA44648467089
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Feb 2025 08:39:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208930
                          IP: 91.215.47.0/24
                          IP: 2001:678:f00::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d5:43:c6:bc:2e:8d:8e:32:3a:4c:a4:46:48:46:70:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  5 08:39:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67d410e707b57971b14a54309f020bacbb4d21b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:4f:af:1a:6b:cf:18:3e:c1:86:c7:d0:97:
                    37:00:fe:46:bb:77:d2:36:bd:16:96:42:f9:dd:0f:
                    fa:59:06:f5:58:8a:bf:ed:25:fe:54:68:ee:52:5a:
                    0e:09:a1:be:72:d4:52:2c:07:02:a0:0d:28:e9:74:
                    d2:7b:e0:df:01:96:09:d3:b4:e5:5b:09:4b:c1:a8:
                    5b:35:f1:9a:6c:ea:3f:2b:15:5c:cf:ab:51:a0:4a:
                    5b:35:74:9e:e6:4b:6d:66:6a:c4:98:70:95:62:28:
                    63:5b:84:c8:4f:42:11:7d:34:24:5f:bf:30:e3:29:
                    d3:89:c8:78:34:a9:e8:d0:c3:c5:33:f1:71:eb:56:
                    f8:9b:14:46:9c:b5:cc:d3:b1:ef:6d:74:44:2d:f4:
                    bd:55:fe:84:82:25:9e:c4:3b:1f:42:25:84:fd:a5:
                    a1:f9:ca:76:55:70:f9:14:7e:1c:5c:c4:eb:51:f4:
                    d3:43:87:c4:d6:58:9f:7d:a8:17:e9:41:f8:bd:d9:
                    c8:f4:71:39:bf:53:74:f0:ad:06:62:7b:e9:f2:f7:
                    35:cb:34:ab:f0:67:e9:84:5b:e6:29:ce:f4:57:50:
                    c0:96:c6:b4:c2:15:2d:24:1d:03:26:a3:19:8f:f7:
                    06:76:1d:98:fb:2d:f7:ce:ad:0d:9c:77:a9:6f:7f:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.215.47.0/24
                IPv6:
                  2001:678:f00::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208930

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:bd:54:f0:45:a4:ba:a2:86:6a:9f:c0:9b:bd:f3:35:e2:
         8c:52:9f:3c:00:72:f0:c4:b8:21:e6:a5:ca:10:c9:ca:bc:f4:
         fb:0d:48:6e:a0:cb:98:d2:37:a7:df:5b:7a:ef:ec:08:73:9d:
         82:78:ae:9a:de:a9:9e:9a:1a:21:59:e7:24:ad:7b:cd:ea:46:
         06:00:a8:ac:15:ed:ef:7c:ee:40:1e:db:fd:ee:3d:68:17:96:
         f8:af:2d:02:82:f5:39:a6:dc:de:87:51:f8:63:f2:cf:c5:52:
         4d:e9:43:cb:ab:64:67:5c:35:1d:ce:1f:b9:a5:33:58:e2:e0:
         57:0e:c0:35:5c:32:57:32:72:02:99:71:36:4b:5d:57:4f:ac:
         88:0b:28:33:89:40:92:75:65:d7:b4:e2:c4:9f:d0:e5:55:21:
         93:10:0e:9e:b0:58:3d:ec:46:70:fc:53:f5:f8:e5:90:6d:d3:
         61:0a:0a:3c:68:25:26:51:2c:cb:ed:50:09:b7:02:17:1c:f5:
         cd:2f:06:e8:a8:19:76:7e:aa:4e:58:cc:62:73:ce:61:9b:f4:
         20:52:78:74:e2:d2:10:57:f1:70:f8:25:16:bd:9a:d2:cc:e1:
         16:16:d6:cc:d7:24:c5:09:e1:40:e7:d0:ef:56:4d:f2:6d:99:
         c5:22:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----