Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
File:                     xs_ZQjfv0gDdCxFuH2-be8plnKc.cer (raw, json)
Hash identifier:          N7CE9+XlzyTcBt1ewyEQOyKc575LkkdkUz9oY6124dA=
Subject key identifier:   C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B3C692B9440E94DB8EF213F4EA197
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8991
                          IP: 192.135.166.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:3c:69:2b:94:40:e9:4d:b8:ef:21:3f:4e:a1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:08:38:e3:16:80:9e:fb:9e:76:6d:ab:72:df:
                    50:0e:fa:de:8b:71:b2:6a:39:3a:58:76:4f:f7:c3:
                    45:d8:19:49:cf:7f:2e:35:82:cd:02:47:7d:47:10:
                    d4:84:ce:33:7f:80:2c:21:46:63:53:7b:a0:ed:ea:
                    e2:e0:ac:54:ef:40:40:9c:66:e1:1a:d0:81:c5:79:
                    39:f1:d7:3a:83:94:10:f0:bf:47:d6:9c:9a:fd:a0:
                    31:44:e5:32:4f:16:19:02:7f:4d:45:9f:f2:20:a1:
                    64:ff:75:d3:7a:d3:bf:a4:55:a3:fe:2b:17:29:82:
                    a0:be:fa:fb:37:e8:18:f0:b1:47:7e:59:a0:cb:2c:
                    53:46:38:fa:39:aa:cc:11:f8:5d:8c:0d:e4:4b:f4:
                    88:54:83:99:c0:5d:57:30:55:07:c2:fc:18:31:94:
                    4f:a7:d9:ab:61:d6:d5:38:8d:73:87:b2:1d:65:97:
                    9b:64:99:e1:b0:d7:4c:a1:d8:75:f2:c1:a2:70:32:
                    f2:46:7d:bd:61:f2:e9:6f:5f:2d:11:ee:26:1a:5f:
                    0f:c7:cd:d2:a6:e9:51:60:7f:d8:e6:19:df:6d:65:
                    92:e9:43:8b:35:25:bd:27:55:0c:96:f0:39:d5:86:
                    bb:d2:74:8f:01:98:68:48:29:00:70:5c:3a:72:5a:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.166.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8991

    Signature Algorithm: sha256WithRSAEncryption
         9f:32:90:10:ab:6c:76:6f:d9:ff:83:ae:7d:ae:da:ff:26:1c:
         f4:88:68:78:2e:cd:3a:1b:a4:95:91:fc:64:17:a3:5a:41:22:
         f6:7c:0c:fd:c8:be:ca:de:d0:0e:42:19:bd:b6:5a:08:5c:70:
         25:dc:00:24:7d:34:e9:5f:a0:12:54:47:b9:36:72:2a:85:9c:
         79:34:2e:ce:02:6b:77:46:33:0c:c2:0c:b5:bd:62:a0:2d:70:
         3a:20:e8:f2:63:8e:55:ca:57:19:e9:27:6e:c5:5d:85:e1:88:
         7a:4e:9d:e2:cb:7e:9a:a7:a2:fc:10:7b:60:67:f6:3f:22:37:
         f4:40:ae:f2:15:e1:fa:bf:12:aa:5b:93:ae:e5:9e:e6:eb:db:
         cd:3d:62:07:d1:b4:22:72:d1:c3:6a:02:5d:80:1d:13:d9:ec:
         2a:ac:ab:c9:0e:91:f0:68:2d:9a:0c:f0:c8:bc:12:4d:28:0c:
         92:3d:19:f3:6a:91:dc:3c:9b:95:95:60:2a:e8:97:bf:61:1b:
         21:bf:66:3d:1a:08:ea:22:8b:8b:1c:62:9a:72:3b:68:c1:a3:
         2d:c9:f7:c2:38:32:58:33:20:ce:2b:1b:be:0c:b2:39:5d:81:
         16:a1:18:5d:f2:c2:9a:4d:5f:b1:b2:7c:2a:d7:49:2a:d9:d4:
         83:c6:16:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----