Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
File:                     zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer (raw, json)
Hash identifier:          Cwkt7h7K3cxONwFeXd3I+OLgD0FGAgN9GjSgDedtZhE=
Subject key identifier:   CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3C365348CE2A396CA30BC12AE82FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 25596
                          IP: 2a02:58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c3:65:34:8c:e2:a3:96:ca:30:bc:12:ae:82:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:eb:47:f2:a2:0e:ca:bd:a9:4d:59:52:92:
                    89:9c:e8:76:07:d8:7f:15:74:e1:62:21:e3:e7:36:
                    10:b9:f1:d5:bf:26:85:54:b0:a8:7e:7c:48:45:6b:
                    b4:49:52:bd:0e:f6:ef:ff:e5:d9:64:96:02:76:b8:
                    50:93:57:b5:c8:a1:c4:b2:25:c5:c4:64:3e:df:da:
                    cd:87:46:66:a4:a3:af:2a:ad:2d:14:b5:8d:a1:6c:
                    47:65:a8:04:65:5a:37:a7:02:16:10:53:84:31:21:
                    f7:c0:1d:c4:da:2b:9a:89:d9:ec:fc:95:a5:35:76:
                    33:e0:ff:f8:bb:0f:c2:97:2c:e9:39:4e:90:74:69:
                    59:97:66:e0:06:e2:d0:8f:65:18:a6:2a:d2:a7:bc:
                    2b:b9:db:1f:2a:c0:70:a6:b8:ec:d6:fa:e0:af:f0:
                    72:04:af:1e:87:20:f7:59:fe:56:e2:cd:1d:2a:4c:
                    9e:6e:4d:97:64:77:68:6e:ff:2a:81:76:ff:c8:81:
                    f0:62:38:65:1a:d0:d8:ce:42:ae:8c:ab:1a:f7:c4:
                    dc:1e:6a:23:84:50:a0:08:8e:d6:21:e4:7f:e7:36:
                    ab:20:34:9e:8a:6a:8a:ba:b6:d2:03:ec:3b:38:e6:
                    4f:44:41:15:62:f2:65:34:eb:8a:a2:7b:e5:cc:0b:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25596

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:71:3c:da:f5:04:3b:a2:aa:d5:ff:d4:94:95:33:21:4c:
         a2:4d:91:31:df:d1:2c:7b:86:d4:7f:20:06:47:5d:6b:71:09:
         bb:c6:35:42:5d:c3:ed:c8:dc:e9:5c:b7:e8:17:ed:a3:9f:d1:
         68:1d:6a:7c:6b:93:28:dd:31:cf:35:5f:eb:83:e7:40:09:d2:
         c1:2f:eb:7e:e7:41:eb:c7:50:15:8c:5b:00:9a:67:e6:41:4a:
         40:aa:c6:72:9b:f1:e5:af:aa:eb:91:6f:5e:b5:a8:01:19:6c:
         90:30:02:be:af:ec:81:bf:dc:3f:4e:f8:bf:44:c5:f6:9b:a1:
         22:3a:86:0d:b9:c4:a1:7b:d3:6a:66:33:cd:6c:e4:08:e0:b6:
         3c:8a:09:9b:5a:03:d2:30:a4:f6:91:3a:11:d0:b7:a8:ee:77:
         60:e3:32:49:34:3a:48:49:a8:25:65:70:46:61:0a:52:1d:62:
         df:87:fc:42:6b:55:aa:7b:b6:06:97:4e:8c:ae:bd:50:8c:cc:
         22:b8:20:04:5b:fb:63:9f:59:ba:21:25:62:49:9f:c0:4c:e5:
         82:af:1e:1f:7f:0f:6f:9d:98:51:33:13:11:39:f4:57:3c:0a:
         81:fe:ce:76:38:96:26:30:d6:92:3f:d3:d9:a2:62:79:c9:e1:
         0a:72:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----