Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
File:                     mzk18I1_BlLdhWIgBXxGSu1SDhI.cer (raw, json)
Hash identifier:          ATTa2Gu7LzomRvdcpTEp4vyqFmpDZSQ6DIKMUMdeahY=
Subject key identifier:   9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424456071D807E13EDC94F9020D9DAA92
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197063
                          IP: 178.249.0.0/21
                          IP: 185.34.88.0/22
                          IP: 2a01:8f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:60:71:d8:07:e1:3e:dc:94:f9:02:0d:9d:aa:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9b3935f08d7f0652dd856220057c464aed520e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:df:82:4b:f5:74:77:d9:64:39:f2:d2:4f:
                    00:13:df:31:1a:b5:d8:d5:76:0d:b0:81:f7:dd:96:
                    d2:55:76:59:81:44:66:f3:9b:f7:78:e7:88:18:ae:
                    4e:c4:8b:5e:2f:a2:08:ed:87:f6:86:8e:b5:6a:aa:
                    1f:87:1f:c4:0e:69:9d:49:3d:83:04:81:8b:36:c0:
                    39:2d:4c:52:e6:a8:bb:11:30:61:92:da:cc:3d:f6:
                    03:4a:d0:81:a3:50:96:9a:3a:f5:59:96:68:d3:2a:
                    3f:59:12:cd:b4:27:57:19:7e:aa:e3:39:fd:0e:b8:
                    50:1e:d9:11:c2:16:13:79:4d:c6:f1:02:18:97:be:
                    0c:08:7d:58:97:1c:f0:ef:40:15:38:e0:5b:94:c4:
                    9c:3e:29:51:e8:42:06:bd:75:55:24:58:10:7f:ea:
                    0c:6b:ac:ec:48:c3:0d:8a:de:24:8b:a4:54:42:12:
                    66:20:a9:9e:fc:f7:aa:66:49:b4:9e:e2:a8:99:89:
                    75:c5:70:cc:fc:86:e9:d4:01:c5:af:58:a0:fe:46:
                    25:77:86:54:bb:94:44:63:14:e7:b7:46:37:29:0b:
                    4b:45:ad:bb:91:27:30:a5:7c:23:94:a5:71:ee:83:
                    0a:b0:31:8c:55:fe:76:e1:70:b6:c1:9d:fc:45:1e:
                    5c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.249.0.0/21
                  185.34.88.0/22
                IPv6:
                  2a01:8f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197063

    Signature Algorithm: sha256WithRSAEncryption
         a9:ca:53:f1:fa:20:a9:df:2e:e9:bb:42:54:cc:0b:52:6f:7d:
         76:65:f4:4e:53:80:e1:4c:20:1d:50:30:3b:e6:ac:b4:dc:ad:
         78:fc:98:e2:5d:6c:ab:36:08:78:ae:ab:5d:9c:ee:4b:ee:9f:
         4d:32:6f:87:e1:37:00:5e:51:09:df:8f:6b:24:1f:0e:5f:39:
         bd:4f:a1:34:90:bd:34:2b:f3:c4:33:2c:9e:26:aa:34:63:38:
         fb:80:2b:ad:2f:41:94:77:12:7a:10:d6:5c:d6:cf:cd:52:05:
         64:e4:2a:1d:1f:7f:4c:f4:88:b4:a0:07:1f:2b:b5:e8:e6:10:
         d0:8e:ee:7f:44:f8:57:78:68:fe:6a:9f:19:94:fb:06:a4:ba:
         45:5f:84:80:55:42:a0:af:c8:f4:08:f5:6e:c0:a1:e5:99:95:
         71:83:ea:b7:61:1b:c8:b8:9f:f0:86:e9:05:d3:66:0f:18:1a:
         bd:e6:1b:09:8f:4e:af:c4:a5:4f:fb:86:c4:e3:f6:e7:fd:94:
         e1:45:43:51:ec:ff:a8:63:0f:ea:b2:8a:7b:b9:f8:dd:7f:96:
         a8:29:ef:40:34:ef:b9:1d:6f:49:ae:e9:2d:9f:e3:61:4d:b2:
         f4:93:3b:6a:5f:a6:24:42:4b:80:78:eb:e2:f6:0e:b6:82:4c:
         01:db:52:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----