Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
File:                     xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer (raw, json)
Hash identifier:          0dhkWPXfhh4YWFhZsCMUjpoMBdBVJAFRikgV4mEZNA0=
Subject key identifier:   C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB7F8E56562EB412DFE851A46E1EB3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49680
                          IP: 95.142.224.0/20
                          IP: 2a0c:adc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:7f:8e:56:56:2e:b4:12:df:e8:51:a4:6e:1e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:71:8b:d4:b3:a1:bd:38:17:36:d2:17:3c:
                    34:89:a6:06:55:ab:ba:0a:7e:da:3f:69:8c:46:34:
                    b8:d6:4d:07:d5:d1:cb:fc:66:aa:c1:97:34:07:9e:
                    ec:14:bb:46:04:05:ab:05:b9:71:6f:85:a8:a8:77:
                    f2:ae:5e:c7:cf:93:f1:6c:6c:ec:1a:3e:5e:29:ff:
                    e5:a3:b0:df:4b:41:01:b3:58:a0:5f:23:85:d4:f0:
                    56:44:98:1f:31:51:4f:88:f2:8f:bd:2e:2f:99:63:
                    ee:0b:c9:00:68:a4:86:38:8a:a5:a3:4f:64:26:94:
                    d2:9e:64:cc:6c:b4:fc:34:10:7e:4a:8f:00:bd:70:
                    76:ce:78:f3:fc:4a:30:72:cf:2e:6b:f1:79:7a:b0:
                    33:89:98:c1:61:60:68:f9:97:e9:ba:5d:d7:fb:7b:
                    11:50:1e:d7:a2:27:e0:9a:ae:4d:ec:c0:24:c9:61:
                    2e:9f:98:f7:91:9f:10:c1:cd:ec:f1:17:20:3f:fb:
                    9b:10:77:d0:24:1e:aa:67:28:69:e7:e2:ef:26:d8:
                    0a:d0:8c:8b:04:52:08:50:4b:5c:f6:b1:34:dd:75:
                    85:aa:27:3b:72:2f:43:50:aa:7e:96:49:1f:7f:11:
                    f3:ab:bc:8c:d0:9c:4e:44:e1:ea:b9:43:87:8f:82:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.142.224.0/20
                IPv6:
                  2a0c:adc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49680

    Signature Algorithm: sha256WithRSAEncryption
         aa:5b:04:63:bd:24:84:81:d1:d0:a8:6f:bd:47:82:88:4a:75:
         1c:3d:78:12:0a:ea:c6:eb:e6:c9:3a:75:16:e4:b8:05:ac:33:
         df:e1:85:cc:d2:42:86:09:af:15:95:3b:94:41:38:03:f8:a0:
         bd:14:66:b2:4f:f6:2f:e9:64:80:48:d0:62:ed:68:99:d3:95:
         bb:5a:32:ef:34:d7:00:f4:64:11:2a:68:ef:38:da:90:68:e8:
         7f:ca:33:3b:52:3a:c3:c9:d3:2c:80:44:53:9a:84:ce:5c:e6:
         e9:f8:e6:25:2c:e9:b0:cb:ae:af:9e:43:22:e1:4d:0a:05:41:
         c5:42:c9:47:5e:5c:59:11:d5:31:88:14:38:d7:e7:25:13:4b:
         13:4b:80:d4:ab:67:aa:40:61:37:21:e3:ed:8b:de:9d:2a:0a:
         9f:a1:c3:0c:7c:1f:cb:e7:a8:b8:bc:2c:35:8c:e2:0f:90:e4:
         f7:ca:58:22:14:30:ea:ed:04:c4:72:ae:29:f5:d7:5c:82:0e:
         cf:5d:45:27:f2:9a:54:f1:61:9b:b0:35:58:5a:9d:33:19:cb:
         47:de:77:10:52:c8:57:91:70:3e:23:8b:72:97:a4:a5:1d:0c:
         b6:0b:c6:94:ae:3c:bc:30:20:73:39:54:8b:06:d8:bc:d6:ae:
         74:ad:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----