Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
File:                     Zr5SEJO7idx2JQsif39_umbiKNg.cer (raw, json)
Hash identifier:          uSdmPr5FFhB9iGD/q1JencdSpBMx5ao49KvV8Zo1QZY=
Subject key identifier:   66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195B9651F60B810642F5DC12BE15F1154AA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 21 Mar 2025 15:49:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215439

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b9:65:1f:60:b8:10:64:2f:5d:c1:2b:e1:5f:11:54:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 21 15:49:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=66be521093bb89dc76250b227f7f7fba66e228d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:13:32:eb:fa:44:c4:64:a1:53:9c:79:12:
                    bb:0b:dd:4a:02:09:a0:9f:57:ac:12:9f:32:23:06:
                    b6:f4:17:fa:c2:ba:48:df:48:16:76:46:5e:e9:fe:
                    4d:11:9c:ea:d4:8a:91:6d:a3:91:8e:c5:9d:a3:ff:
                    ef:cc:ec:d5:87:dc:2c:5c:04:8d:13:5a:f2:a1:ab:
                    32:c0:75:13:6d:30:d7:82:2b:08:c3:0a:74:3f:2a:
                    d1:7e:df:6f:8b:c6:ed:4c:46:3f:9f:5b:81:78:39:
                    70:ec:d5:0b:f6:72:28:c9:12:41:86:8d:ed:89:a3:
                    4b:1a:30:21:6a:38:8f:f3:4d:3e:a0:5b:0d:81:ba:
                    4b:77:2d:ca:32:90:1b:0e:bc:5e:5e:c5:8e:00:4f:
                    ed:4e:2f:36:ae:15:6d:08:64:38:78:8c:d8:1e:dc:
                    2b:23:5f:d4:94:de:42:6d:92:f6:b0:8d:31:87:a1:
                    76:0c:90:00:1b:ab:4a:85:ba:38:54:8e:d1:8b:43:
                    28:7f:15:25:27:b0:44:ac:b5:5d:57:4e:63:51:84:
                    a6:9b:a4:ed:a3:c4:61:7e:53:47:52:28:0e:11:17:
                    7b:22:c3:87:91:bb:cd:40:1d:2b:61:c7:0f:0a:69:
                    11:39:7f:f2:61:df:37:f0:82:15:14:f2:db:aa:b3:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215439

    Signature Algorithm: sha256WithRSAEncryption
         78:39:4a:0f:5f:49:6e:8d:73:0c:eb:0b:51:23:96:ca:ef:92:
         fc:ed:12:06:9d:8e:35:4d:3c:43:9c:49:a7:0e:4e:5d:5d:d8:
         6b:c2:b0:15:24:03:4b:9b:81:13:96:ee:f1:d7:87:dd:d2:62:
         3e:43:65:0d:b0:25:c2:8b:42:28:90:55:9d:37:23:c7:71:dd:
         88:c7:00:f0:e6:4a:3b:36:49:53:ac:a5:e0:20:ad:69:82:84:
         42:69:8a:c3:e5:76:b2:cb:52:e9:88:1f:4b:cf:f5:d9:c3:e8:
         f1:73:7f:99:6a:0d:95:e6:c5:6d:06:c2:08:04:8e:4c:1b:c5:
         48:96:66:ad:11:9c:d0:02:e5:cf:88:b3:9b:d7:ad:4b:a7:68:
         6a:e8:4c:bf:dc:0a:70:1a:f4:6c:85:a8:3b:a6:ba:1c:c7:b7:
         be:33:47:cd:18:8f:d9:fc:d4:4c:bd:22:bd:2c:25:11:d5:06:
         2f:42:a7:ef:8b:63:d9:31:c2:ca:1c:00:19:0f:40:65:8a:20:
         df:52:75:ec:19:43:21:8c:f2:14:29:a1:10:22:df:07:07:93:
         60:c4:61:f8:a6:97:eb:73:f6:a8:d6:3b:81:87:38:43:91:b5:
         de:1d:b2:cc:48:06:0c:18:21:df:de:37:52:bd:28:ec:9b:5b:
         6a:f1:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----