Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer (raw, json)
Hash identifier:          6fBwOr/Xqxp91txdUYo3EqURmbdJdf+xM5haGJHrAxo=
Subject key identifier:   65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A1C64406483EFA87F672BDF6E7F1F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59795
                          IP: 213.184.84.0/22
                          IP: 2a09:3a00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:1c:64:40:64:83:ef:a8:7f:67:2b:df:6e:7f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=651bad95276947c7be536af4c870a3721f0b7761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:e2:f9:35:57:8a:a6:c9:24:c7:ad:07:31:
                    d2:6d:cb:27:7f:d4:7f:69:5a:f2:de:56:77:71:63:
                    e0:cb:49:6e:11:48:e2:14:11:89:eb:35:b5:15:72:
                    96:2c:3f:18:d8:10:20:6e:87:46:9a:83:29:3d:b5:
                    61:88:89:0f:d3:e2:5e:60:7f:81:46:1c:2c:7e:66:
                    14:93:cc:dc:a0:43:86:37:fe:f6:0c:eb:1d:ea:23:
                    a6:b4:a1:f8:ca:d8:c7:f3:46:5f:6a:5a:82:ea:ce:
                    bc:1b:c8:a0:c4:a3:d5:94:b9:3f:32:c3:3d:df:5d:
                    6f:21:73:7f:29:2c:74:50:1f:b2:8e:c7:5b:97:d4:
                    e6:7b:08:8c:b0:b7:6a:87:60:2b:3b:71:d2:04:6d:
                    29:89:43:7d:cd:61:c4:89:2a:07:da:88:b1:be:db:
                    09:ae:26:d6:94:58:8f:c9:91:cd:62:ad:8d:7b:f6:
                    c9:b4:6e:c7:76:30:28:5c:b0:ed:00:35:11:c4:7f:
                    c3:87:ba:26:9e:ef:05:23:cd:9a:c5:a5:28:7b:7f:
                    60:55:3b:9f:b1:e5:bf:0c:50:3a:58:0c:8a:b1:6f:
                    77:de:84:8f:3b:f9:83:e9:47:7a:35:9b:4e:91:cb:
                    b5:49:a3:c4:9b:08:a5:7e:63:5e:28:ef:b5:47:c3:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.184.84.0/22
                IPv6:
                  2a09:3a00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59795

    Signature Algorithm: sha256WithRSAEncryption
         49:53:d8:ad:23:b2:e5:57:61:5d:93:30:97:b7:f1:31:ec:34:
         44:8e:8f:75:63:8a:77:2c:ba:83:9e:53:52:f0:b4:24:b0:17:
         bc:d0:d3:b5:2d:fe:d1:47:36:05:8c:8a:d4:8f:51:2f:b8:4e:
         2f:01:96:3c:61:43:37:6f:bd:20:77:72:b2:2a:2d:53:ec:77:
         53:a9:32:fa:65:26:0b:07:b2:5c:42:7a:6d:ec:6a:82:2b:af:
         e0:85:08:fe:5e:4f:a9:9f:ab:f0:f2:ca:ef:93:9d:e8:0f:32:
         44:f5:c2:d9:f9:12:f2:0a:77:c5:9a:10:2e:6a:ad:ea:94:ce:
         5b:a4:5d:e7:e5:ff:21:57:25:e4:4e:ab:5a:3a:5a:c0:69:77:
         a3:66:aa:45:3d:4f:e5:00:e7:bb:47:47:b3:c4:48:fe:ae:53:
         05:a8:82:5a:88:53:6e:7a:31:cf:41:b5:2a:e7:10:7c:48:fc:
         6b:a7:5b:ce:60:5d:3e:d2:bb:fd:57:2c:28:3a:c7:38:d0:4e:
         c7:77:77:f5:53:a4:aa:16:8c:0b:25:c2:bf:d7:76:05:9c:57:
         2e:8f:c6:6e:41:38:45:29:08:3d:f2:3f:d5:99:ea:7a:0d:4c:
         cc:1f:74:43:d4:0d:ad:e2:a9:73:69:83:88:49:c6:c9:03:a5:
         53:29:5d:e0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQjahxkQGSD76h/Zyvfbn8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTFiYWQ5NTI3Njk0N2M3YmU1MzZhZjRjODcwYTM3MjFmMGI3NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBzi+TVXiqbJJMetBzHSbcsnf9R/
aVry3lZ3cWPgy0luEUjiFBGJ6zW1FXKWLD8Y2BAgbodGmoMpPbVhiIkP0+JeYH+B
RhwsfmYUk8zcoEOGN/72DOsd6iOmtKH4ytjH80ZfalqC6s68G8igxKPVlLk/MsM9
311vIXN/KSx0UB+yjsdbl9TmewiMsLdqh2ArO3HSBG0piUN9zWHEiSoH2oixvtsJ
ribWlFiPyZHNYq2Ne/bJtG7HdjAoXLDtADURxH/Dh7omnu8FI82axaUoe39gVTuf
seW/DFA6WAyKsW933oSPO/mD6Ud6NZtOkcu1SaPEmwilfmNeKO+1R8PUSwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGUbrZUnaUfHvlNq9Mhwo3IfC3dhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzFkYmQ2
Yi0zNWNjLTRmMDktYjkyZS0xOThiNmE2MWNlODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMWRiZDZi
LTM1Y2MtNGYwOS1iOTJlLTE5OGI2YTYxY2U4NS8xL1pSdXRsU2RwUjhlLVUycjB5
SENqY2g4TGQyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQC1bhUMA0EAgACMAcDBQMqCToAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDpkzANBgkqhkiG9w0BAQsFAAOCAQEASVPYrSOy5Vdh
XZMwl7fxMew0RI6PdWOKdyy6g55TUvC0JLAXvNDTtS3+0Uc2BYyK1I9RL7hOLwGW
PGFDN2+9IHdysiotU+x3U6ky+mUmCweyXEJ6bexqgiuv4IUI/l5PqZ+r8PLK75Od
6A8yRPXC2fkS8gp3xZoQLmqt6pTOW6Rd5+X/IVcl5E6rWjpawGl3o2aqRT1P5QDn
u0dHs8RI/q5TBaiCWohTbnoxz0G1KucQfEj8a6dbzmBdPtK7/VcsKDrHONBOx3d3
9VOkqhaMCyXCv9d2BZxXLo/GbkE4RSkIPfI/1Znqeg1MzB90Q9QNreKpc2mDiEnG
yQOlUyld4A==
-----END CERTIFICATE-----