Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
File:                     zEH27mce6lNY5xzn_BHJNsw3bGE.cer (raw, json)
Hash identifier:          S1HVZA0hqDjyUXlOi9YsUIyOK8lIYeSC6qQr6laWlEw=
Subject key identifier:   CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BCB05ABC6D883E83740B110A53FD7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44776
                          IP: 85.158.12.0/22
                          IP: 93.94.64.0/21
                          IP: 2a02:110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:cb:05:ab:c6:d8:83:e8:37:40:b1:10:a5:3f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:8f:f7:44:28:3a:e1:99:b7:6e:75:c7:4a:
                    5b:53:8a:81:fa:bd:6b:d7:98:53:4b:ae:4a:f3:42:
                    d6:e6:c5:f1:38:57:0d:95:a9:4a:a5:2c:3c:9b:87:
                    53:f4:7b:18:2b:0a:47:ba:f1:cc:dc:7c:fe:bb:60:
                    ba:1c:1f:71:04:68:0a:bf:d1:1d:c9:72:0b:aa:71:
                    65:72:b7:65:29:c6:09:a7:a0:31:fe:4d:cb:52:03:
                    9e:05:31:eb:b6:d9:eb:16:5e:a8:b7:62:c9:91:2d:
                    9b:26:59:3e:5f:51:ad:57:3c:76:b3:e2:3d:fe:fc:
                    38:cd:a0:4c:5e:58:6a:66:38:12:8c:53:e5:c4:a3:
                    3a:83:0f:44:0a:d1:16:fd:bb:58:83:d8:73:69:47:
                    fd:ac:7e:c1:3f:ed:e1:2d:33:ce:8e:f7:0a:ae:22:
                    92:aa:19:01:05:02:76:d5:dd:60:93:60:63:ab:34:
                    58:fd:7b:5a:14:b7:a5:be:ef:94:bc:94:c0:b6:a6:
                    16:5a:f6:0d:03:d1:4b:94:46:e6:7a:43:b2:93:bc:
                    c0:3f:05:1d:ae:76:32:dc:84:20:07:ee:d9:df:d8:
                    c8:64:74:de:66:4c:76:e4:a9:44:7f:3e:22:63:c2:
                    a4:77:30:71:a5:ec:13:ce:3e:fc:99:03:81:71:dc:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.158.12.0/22
                  93.94.64.0/21
                IPv6:
                  2a02:110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44776

    Signature Algorithm: sha256WithRSAEncryption
         81:d2:51:77:3f:9d:f7:2f:ec:9b:0d:a3:b7:cb:15:c4:cb:b0:
         08:34:8e:fa:fa:e9:76:ae:4d:26:10:7b:79:22:7e:63:eb:ff:
         af:a1:21:a3:75:8e:dc:10:58:ab:e9:5b:0b:94:84:be:75:0d:
         6e:85:fd:14:5b:07:61:37:ef:1c:24:8f:34:a5:ac:0a:ba:9d:
         7d:0a:8c:69:07:da:65:bd:b0:3a:5d:2b:07:0e:dd:5c:ea:b0:
         c1:44:cf:dc:7e:09:cc:1d:03:cd:3f:1b:a4:e8:b3:97:8b:17:
         e1:eb:b3:8c:33:d0:11:c6:cd:de:3e:ee:e7:e9:2e:bb:bd:a0:
         72:9a:6b:b1:00:ea:e7:f0:3d:47:7c:8c:e0:d5:d0:d5:bf:83:
         55:ba:37:f0:d8:96:ec:4f:5b:da:64:69:b7:5c:4c:85:3a:12:
         18:27:8c:a2:20:f3:22:fa:5c:91:85:fd:1c:71:09:60:1b:5b:
         00:f1:d8:0a:03:b5:08:5e:8b:73:f3:52:ab:4b:2e:06:83:a6:
         a1:0a:1b:27:d0:8a:44:b8:47:4e:8f:3c:59:38:c6:83:ae:17:
         25:af:f2:85:63:a9:e0:b3:e4:71:b8:e1:89:8e:d9:f7:61:d7:
         23:7b:ef:e6:97:b5:64:3e:c2:6b:f1:7e:08:bc:3b:b3:5f:f1:
         5d:4b:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----