Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
File:                     ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer (raw, json)
Hash identifier:          q/WH6GuAosI70GrkD0OOArZVJ0LFNwAoY55BWEz71G8=
Subject key identifier:   64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019519061C265231C47DD556E3F266DBB72B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 12:26:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198441

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:19:06:1c:26:52:31:c4:7d:d5:56:e3:f2:66:db:b7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 18 12:26:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:6d:8e:56:ef:e3:9d:48:42:93:49:b1:7e:
                    76:c9:22:74:54:7b:e9:1e:1b:b5:5e:d8:ce:63:5b:
                    7c:c9:1d:3f:e5:47:a8:92:53:e1:84:6a:34:a7:f2:
                    ee:b8:83:39:48:7d:9c:ab:83:56:a6:3b:62:b5:cd:
                    7f:c9:89:c0:4e:c8:7f:20:6c:d6:b2:31:f0:08:a2:
                    5d:64:c7:ba:d4:e2:d7:62:95:63:14:dd:ba:a5:9c:
                    70:e1:3e:1e:80:22:2b:37:15:2b:4a:bd:da:50:f9:
                    d5:0c:34:ce:50:f1:7a:34:be:f4:a0:52:a0:4e:c1:
                    6b:88:7c:51:a1:dc:a0:00:a5:91:e7:8a:d9:6a:d1:
                    80:03:b3:1f:c8:7f:f5:fd:05:1b:da:8f:1e:68:f6:
                    c7:b6:78:2d:a4:7c:92:89:d9:e6:31:4c:d9:af:8b:
                    30:80:f6:f7:38:65:c6:4f:4c:85:24:9b:a1:31:20:
                    86:bf:dc:27:1b:11:c1:3f:d9:85:fb:47:ea:61:f2:
                    8c:07:60:28:9f:eb:ce:14:65:5b:79:84:66:6c:2d:
                    25:f6:57:03:81:e6:cc:e0:d1:32:23:26:48:be:be:
                    b1:a5:c3:74:e4:90:f9:9f:a9:d1:5b:e4:c9:8a:10:
                    43:1a:8b:a5:de:36:f1:c2:1a:06:8d:75:95:bd:af:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198441

    Signature Algorithm: sha256WithRSAEncryption
         58:90:01:13:b6:0d:ac:6c:a7:11:1c:ff:d0:41:6c:b3:41:6a:
         1d:5e:20:4c:7c:d9:f9:06:2f:a9:0c:62:82:e8:05:0c:10:af:
         83:91:81:06:b8:45:df:8c:90:48:f7:5b:59:bd:b3:37:b8:d1:
         42:dd:16:ed:bd:ff:a8:03:1a:c3:ee:03:82:f6:61:79:2a:d1:
         ce:78:84:7e:38:bc:18:a8:52:09:dd:9c:6b:85:05:98:e8:27:
         26:fa:b2:4c:df:2a:c9:c7:fa:f4:23:8a:97:39:01:b8:31:1a:
         9f:f8:23:1e:19:d5:7d:e8:0a:dc:2a:ab:d5:05:6d:0f:20:65:
         3c:05:22:a8:0e:6d:6d:ea:0f:c8:fb:7b:9a:cf:1f:4d:bc:6d:
         b4:4a:f4:cb:0e:d7:33:14:e4:20:f7:e8:52:7d:ee:38:d9:e1:
         72:e4:85:1e:c4:e0:d9:f4:40:36:25:72:eb:fb:ae:85:04:39:
         8e:32:e2:1d:5a:b2:7f:d2:44:b8:4f:a3:06:0d:1c:7b:d0:6e:
         08:da:78:ec:a9:79:d7:21:23:5f:05:48:3c:5d:3c:b4:6e:b3:
         8d:13:ad:63:73:59:62:c6:6b:6c:60:25:dd:75:07:f7:2f:0e:
         7e:09:1a:1c:22:cb:8b:1d:8a:94:6e:d1:47:a5:d6:85:ca:1d:
         ed:75:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----