Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
File:                     Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer (raw, json)
Hash identifier:          BxQIegit8Buu80ZvQqNgonl6e93MvnsRrqotwvEnUqI=
Subject key identifier:   66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C18E8EAD8AECDA7A6F9DAFD1236E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43619
                          IP: 45.66.108.0/22
                          IP: 2a09:6840::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:18:e8:ea:d8:ae:cd:a7:a6:f9:da:fd:12:36:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=667d377dd4c830c246cb48a934699699e4b37741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:a4:5a:ee:ad:8f:5f:3e:f3:cf:f6:98:e7:
                    6f:43:f8:bb:c2:b3:38:bd:30:1b:a8:1a:2b:33:50:
                    08:3b:ef:c9:12:4d:0e:ca:34:e9:aa:91:22:d3:8c:
                    72:e5:b3:03:61:21:b0:8d:4f:96:3f:3b:0b:81:cb:
                    31:32:52:6b:c1:d7:09:59:ed:32:8b:ff:48:b5:0c:
                    91:92:8b:8d:f4:3a:4f:c6:68:64:3a:ef:d8:1d:c0:
                    e1:1c:4a:22:3b:74:15:c1:2b:be:63:5a:e8:ba:6f:
                    e5:73:ff:1e:2a:5f:89:8b:9e:03:1d:92:2a:8e:1a:
                    50:2e:b6:61:91:ab:30:88:60:b6:f9:d2:82:74:51:
                    9a:cf:05:18:4c:e6:12:b0:fc:1a:05:f8:ce:b7:55:
                    38:dc:58:6d:09:52:b5:d3:bb:9e:68:f8:85:7f:c7:
                    76:61:c9:fe:2c:12:f8:9d:46:eb:23:d7:33:33:56:
                    cd:28:aa:30:f3:8c:21:ef:0f:b0:d7:80:0a:f7:66:
                    72:70:0b:85:b8:70:50:ab:54:4d:aa:bc:98:a0:49:
                    a3:2c:32:77:19:07:a7:10:08:26:20:83:2c:d2:64:
                    ff:c0:2d:d6:e8:01:8b:45:b8:bc:aa:53:f6:12:2d:
                    f9:03:49:36:89:22:b6:c1:65:ce:60:09:7e:70:4e:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.108.0/22
                IPv6:
                  2a09:6840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43619

    Signature Algorithm: sha256WithRSAEncryption
         47:71:d3:85:93:f1:13:98:c1:e1:f2:1f:c8:91:17:bc:da:89:
         0d:89:16:d4:13:80:6e:43:3e:d0:8c:d8:c2:6d:f2:f3:34:bf:
         39:df:d9:b7:72:d2:9e:40:71:36:6d:91:e7:1d:ed:7e:c8:68:
         0b:12:31:c0:3c:6c:37:b7:0b:42:04:9d:00:75:f7:b4:05:7f:
         c4:dd:3d:81:fb:d0:86:99:43:d6:11:3f:b2:37:06:c3:70:79:
         97:9f:ad:3d:8a:6a:98:d0:ba:c0:32:93:65:63:10:12:df:61:
         d4:d9:64:9b:f0:cf:8f:82:be:27:be:bb:fd:1e:2f:88:8d:34:
         ab:18:d1:8a:49:92:ed:81:4a:ea:0e:12:fb:6e:51:ef:aa:95:
         23:df:84:08:df:2f:17:ec:2d:c5:3d:d8:e9:4a:b7:3d:cd:e2:
         c4:81:5d:4e:11:c6:ae:90:a0:c5:5f:32:85:6c:e4:b6:96:a6:
         14:17:54:af:76:57:fb:0c:11:d8:a6:fa:d3:77:f1:b5:05:99:
         d3:e5:70:f5:53:92:d8:ef:89:54:e3:78:dd:e7:78:c8:9a:78:
         68:d1:a0:ba:81:a9:8c:cc:d4:c5:14:c4:c6:55:56:93:ca:0e:
         77:7d:42:eb:34:a2:68:ce:da:fb:bb:30:d9:8e:1a:50:3c:70:
         36:9a:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----