Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
File:                     z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer (raw, json)
Hash identifier:          Hv0KOr5TuK6BlsolmOQXmhIuQW9gBxaKsQci4uZMV5U=
Subject key identifier:   CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD9E24B35CDD97F1B4C2AC9B725D3E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51553
                          IP: 85.91.48.0/20
                          IP: 91.217.237.0/24
                          IP: 2a0b:f180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:9e:24:b3:5c:dd:97:f1:b4:c2:ac:9b:72:5d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:d0:bc:d6:36:34:f6:36:d8:0a:51:fe:fa:
                    5d:d7:f0:43:04:64:38:e9:aa:c0:1a:97:d0:2c:1f:
                    2e:c8:1f:92:da:a4:65:95:03:fd:ce:a6:3f:60:9f:
                    6e:64:8b:01:73:e8:34:85:00:46:4a:07:f1:1c:4e:
                    8d:86:ee:b1:f8:27:3d:f5:67:cc:7f:fe:08:4d:2b:
                    42:50:e3:bf:73:8a:4b:5b:75:bd:cb:85:43:af:69:
                    45:eb:0b:b0:d0:af:75:29:e0:cd:e9:01:df:8d:e1:
                    d6:3f:af:7c:d9:48:b8:60:f0:e7:ec:c4:32:d3:d5:
                    7b:be:33:12:51:29:86:c2:10:00:f0:d3:ea:b8:98:
                    77:a5:2b:04:b4:e0:d6:99:4e:c5:02:07:09:aa:02:
                    a5:67:41:48:a8:00:2f:e6:66:04:19:47:96:7f:f8:
                    bf:7c:10:35:77:3a:39:e1:0c:90:86:44:49:ca:d9:
                    4f:9b:39:31:06:3d:d2:16:5a:9d:be:0f:67:92:d6:
                    1e:c4:75:8a:ea:2b:2f:4b:0c:01:9b:9e:1f:c1:e4:
                    7b:dd:64:7c:75:9a:c5:c5:c5:43:db:f6:ef:b5:56:
                    1c:e2:cd:cf:74:d9:d3:c3:c9:a6:74:8f:9b:ca:39:
                    cf:0c:37:f4:15:69:41:d7:62:f1:5c:b4:a8:46:0a:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.91.48.0/20
                  91.217.237.0/24
                IPv6:
                  2a0b:f180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51553

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:d2:ca:b3:e3:14:ac:0c:00:db:d9:ff:e7:d2:28:31:cc:
         58:96:6f:8e:7c:86:6b:85:cc:93:14:1a:b2:a7:74:76:4c:dd:
         3f:cf:98:9a:07:b2:79:7c:43:55:43:da:bc:ec:54:57:f9:b3:
         8f:f3:41:d9:77:45:68:a7:18:2d:04:2a:62:e4:eb:4c:91:5a:
         7f:e1:de:98:db:0c:d8:39:5d:79:1c:c8:e9:8f:24:f1:19:43:
         b6:83:52:68:74:6e:a0:eb:ea:2f:74:82:c3:6b:bd:c6:57:40:
         7e:a5:9d:b8:a7:71:2c:d6:8c:32:db:cf:a9:31:60:24:c2:0f:
         fe:1e:ec:b1:0f:43:66:aa:c4:6f:cf:8e:b8:b2:de:09:dc:d0:
         18:71:16:af:13:b0:fb:8f:e1:e2:e1:81:b7:03:f0:2f:98:5e:
         9c:d4:2a:56:e9:5d:d0:dd:b9:a8:69:12:5a:bd:b9:ab:7d:1f:
         d5:96:0b:91:be:f5:c4:9f:f6:76:90:af:1b:c5:e2:f4:61:c8:
         8c:73:42:3e:26:1b:a9:70:5a:be:27:7f:46:3d:fe:ad:3e:a3:
         b8:2d:c8:ac:d6:aa:60:58:f7:47:d2:a6:e3:2b:0f:54:ef:82:
         f6:16:19:82:4f:2e:d6:26:14:ba:01:26:1f:01:70:9e:cd:4e:
         67:32:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----