Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
File:                     ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer (raw, json)
Hash identifier:          8oFp4ezS2Jk0XoQoNygXZCmYQ3GVA5HB19mjBU4yaWA=
Subject key identifier:   65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425216F0A156620B07154B125E314B938
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207822
                          IP: 94.142.128.0/24
                          IP: 2001:678:b98::/48
                          IP: 2a0a:f00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:6f:0a:15:66:20:b0:71:54:b1:25:e3:14:b9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:d6:f1:86:7c:ca:ad:a5:17:c2:b4:4c:cb:
                    33:4f:d1:b1:7d:7d:8f:9d:20:b0:5c:7c:fd:e9:3d:
                    73:7f:60:8a:e8:41:48:05:86:39:6f:d7:6e:0c:f5:
                    53:e0:17:37:ac:37:24:a9:1b:37:f8:b6:c2:8c:73:
                    98:a0:cb:7b:31:37:1f:a6:9e:af:55:11:b2:aa:d5:
                    53:f0:f1:05:64:cd:fc:ef:19:02:eb:fb:42:be:94:
                    94:d4:2d:11:32:9f:f2:18:7f:b5:ad:24:f3:a5:78:
                    08:ed:84:67:6a:62:7c:c8:49:03:4d:d1:ef:9e:83:
                    74:c7:30:bb:f1:50:43:db:2a:f6:a1:80:e9:6f:6a:
                    7a:f1:4c:78:db:2e:b3:89:0d:94:cf:47:ab:88:6f:
                    56:a1:58:27:0d:b0:5c:04:6a:7f:7e:23:36:b0:95:
                    1a:a8:7a:e9:0e:7b:e2:25:66:97:d2:80:61:19:7a:
                    be:14:5e:c3:56:32:45:f0:f4:3d:70:92:5c:30:96:
                    70:47:4c:27:31:ef:87:e7:2e:74:1c:99:01:b3:97:
                    ce:eb:6d:97:ec:84:66:7b:25:03:ff:e2:5b:d7:9a:
                    7b:08:29:c2:3d:69:9a:77:0e:b9:ec:ef:ac:10:14:
                    48:14:be:39:4b:ae:ba:08:c1:09:6a:d0:4b:37:31:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.128.0/24
                IPv6:
                  2001:678:b98::/48
                  2a0a:f00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207822

    Signature Algorithm: sha256WithRSAEncryption
         4f:70:25:52:a7:a6:5e:b6:7f:e1:40:48:23:c1:39:af:23:86:
         61:bc:d7:26:83:5f:ce:3f:b8:6a:1b:58:cc:f5:e2:67:13:6a:
         87:a4:f3:16:d0:5d:8e:d1:0c:12:e7:6d:8a:7f:77:2e:5a:bb:
         78:3a:84:a5:02:c4:71:7c:ce:ad:33:93:c8:1d:e6:f9:a1:3f:
         c2:c2:42:e8:f8:ff:a5:4d:af:1d:21:b3:96:0f:00:49:0a:49:
         bd:a0:45:39:7a:e2:ed:8e:8a:7f:20:60:db:36:92:85:ff:1e:
         95:6d:7f:59:ec:1c:38:b2:a1:f0:f8:b0:83:6e:a4:c9:b0:eb:
         03:be:ac:5a:81:60:8d:21:f3:c1:17:47:96:ad:72:d3:d3:11:
         4a:76:e2:4f:ab:41:a9:46:6f:aa:44:d1:85:04:bc:3e:81:59:
         2e:39:dc:42:5b:d7:b2:7f:cb:29:64:e8:9b:f3:90:b4:eb:d7:
         cb:53:9f:ff:ae:9f:32:46:23:a8:d6:88:f7:7d:e7:64:da:c6:
         5b:4b:01:0a:5c:c3:eb:ee:03:d1:29:91:89:02:ad:e8:cb:b3:
         6f:fa:57:9a:8f:e4:0f:54:7e:3c:d1:68:c5:d8:3a:a1:69:a8:
         d9:4a:bc:e0:57:0d:ca:38:7e:f3:4e:79:f3:50:c5:4e:90:99:
         df:7e:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----