Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
File:                     ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer (raw, json)
Hash identifier:          TpWrsfQDjIRiAT6KQ+QfzVrB11xxU7nDyTpuTW6aVkI=
Subject key identifier:   64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019537AA738208858C89F2EADB93A4795301
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2025 11:14:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215669
                          IP: 80.68.157.0/24
                          IP: 2a12:c580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:37:aa:73:82:08:85:8c:89:f2:ea:db:93:a4:79:53:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 11:14:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:ed:64:df:ef:77:72:bc:38:68:1f:91:e6:
                    24:2b:09:eb:dd:d2:37:1b:dd:4c:0c:17:d7:05:99:
                    98:03:50:1b:8d:75:30:47:81:5a:32:c5:45:30:ae:
                    6c:47:58:f0:10:7d:8d:44:aa:d7:28:c5:d8:f3:a5:
                    7b:ad:c4:87:9b:3e:06:26:39:e3:11:10:81:b1:29:
                    f8:b8:e0:04:54:aa:54:49:1e:10:bb:d4:bb:77:d7:
                    62:2d:22:52:08:fa:00:a1:b9:34:4e:41:04:09:52:
                    bf:fd:ef:cd:27:97:4c:c6:b0:16:d0:43:6a:da:93:
                    19:3d:09:21:09:a0:89:4d:93:f8:90:77:30:b2:50:
                    87:42:ad:d3:1a:34:43:82:ed:6c:3c:93:00:8c:82:
                    e0:2c:5c:83:4c:1c:5f:85:4d:37:16:71:9e:56:77:
                    9d:df:67:af:77:64:04:0d:c5:da:c0:4e:3b:d9:5c:
                    95:d8:fa:fe:80:93:b3:2c:cb:5c:63:a8:94:83:18:
                    d9:48:22:26:b1:ab:58:13:c5:b7:f0:c4:18:76:24:
                    ff:47:8a:40:3b:37:f6:13:e6:db:88:6c:19:12:e0:
                    3e:e5:7c:77:72:a2:33:e9:8e:e6:e4:8e:33:8b:99:
                    b3:37:fc:65:78:66:c1:85:1f:c4:03:63:4b:f7:63:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.68.157.0/24
                IPv6:
                  2a12:c580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215669

    Signature Algorithm: sha256WithRSAEncryption
         08:83:01:5b:2c:80:3e:dc:55:8a:f6:57:29:40:04:c1:ab:a8:
         b7:c3:9f:f8:de:6b:7c:1d:f2:58:38:bf:6c:51:64:2e:8b:ac:
         38:b7:6e:4c:38:8f:aa:3a:3d:76:fa:2b:ba:6f:69:7d:69:a4:
         7a:5d:e5:27:6a:9b:3d:14:43:af:ed:5b:17:8e:88:16:bf:95:
         22:58:15:9e:4f:cb:cd:a5:d9:28:fb:56:3c:f9:8c:bd:9b:85:
         4f:98:13:04:e7:df:e1:ce:31:ec:1a:e1:b1:95:1c:38:6e:5c:
         66:41:61:fe:b1:43:a0:e3:0b:e2:29:36:df:3d:3d:36:40:c0:
         86:31:7f:f9:3b:b4:00:e3:05:07:63:6f:db:64:fa:45:be:03:
         45:59:99:35:1b:98:f2:02:f5:c9:41:d8:a9:cb:f6:73:5d:09:
         2e:2f:60:ec:64:d3:32:2d:3e:e0:76:8d:42:ac:29:41:1b:f3:
         52:12:97:40:93:1b:b8:03:2d:f9:a0:57:f3:4e:98:60:4e:3c:
         57:37:04:53:71:37:bf:66:f5:2b:71:93:57:df:a7:aa:b9:d4:
         31:e2:29:3b:e8:bf:af:ac:15:46:08:3c:a0:7c:61:2d:ef:54:
         b4:72:db:c1:92:04:2e:6e:40:35:d3:5d:62:68:fc:75:27:2a:
         59:7c:a7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----