Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
File:                     zPqIwisefFLecaN2Q96jw_zdSVQ.cer (raw, json)
Hash identifier:          l45LpE7r3FNiaQ7U/9W92p7L3i2cTA7ccb9SHEVmah4=
Subject key identifier:   CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F48CB298AEC0D98B8ACF01D5AEFFC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:2c24::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:48:cb:29:8a:ec:0d:98:b8:ac:f0:1d:5a:ef:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:d6:5c:8c:a8:7c:20:b9:9a:f9:fd:b9:96:
                    a9:b5:8f:41:ba:67:eb:d9:19:04:66:aa:5e:cd:22:
                    b3:79:af:1c:91:14:96:f6:c7:90:88:04:92:8d:0a:
                    b1:d4:32:74:17:e4:50:b8:81:16:11:eb:2e:ac:17:
                    b2:02:91:75:fa:4d:ee:78:66:44:fe:05:34:6f:00:
                    f9:98:b3:cd:56:09:d1:63:5e:d0:da:67:65:10:06:
                    46:e1:ff:d0:06:ba:91:f5:4a:ed:e2:bb:69:f5:d2:
                    51:5d:d9:1a:ca:12:c4:3b:c2:0d:77:e1:84:1e:c4:
                    58:f0:77:e3:22:78:b6:97:4b:02:02:6c:78:3c:36:
                    73:d6:b8:fd:0a:c6:ce:15:23:f6:6a:4b:a5:d0:69:
                    03:ac:d2:51:17:2f:86:d6:21:9e:2d:a6:a4:5d:8a:
                    d0:f9:0d:bf:5d:64:4a:8c:dc:70:22:9c:75:1f:0e:
                    b0:d8:41:9d:cc:a1:98:a2:f0:94:f4:af:ee:b7:c2:
                    67:dd:c7:46:29:25:5f:55:db:6a:62:9e:39:62:86:
                    0a:b8:b8:e5:4f:f4:15:87:52:e9:75:08:d1:0f:d7:
                    54:85:30:f6:26:64:21:dc:53:15:2e:f0:d6:bd:c2:
                    f5:38:a9:5e:16:10:a9:26:75:dc:5b:e0:0b:85:4b:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2c24::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:84:4e:02:c5:8e:b5:01:61:5e:ac:13:79:02:10:e5:6c:eb:
         26:69:d9:a1:e0:a5:ea:5b:e8:ed:68:8b:9e:6f:22:c0:bc:ae:
         e5:95:fc:de:c4:0d:3d:4a:33:9d:56:1e:b7:91:96:af:45:72:
         68:79:af:a6:75:5f:7d:d8:97:9f:14:81:95:96:3f:d1:5b:10:
         75:8f:bb:c4:2e:3f:a3:52:5f:47:04:b5:55:5f:c0:60:33:1e:
         0a:ac:03:33:2c:df:31:54:62:9a:d6:9e:23:d3:fa:96:35:03:
         7c:dc:d6:bc:d8:5f:f4:f4:b6:4e:8a:e3:f7:fc:00:15:52:dd:
         fb:6c:f5:8b:d6:19:78:90:98:f3:33:a0:f9:46:58:d0:b5:d9:
         95:70:2b:21:7b:f1:ff:b5:7b:2b:84:e0:e2:69:f8:8e:a4:80:
         5b:0e:ad:29:8b:16:dd:88:58:3f:bd:43:da:68:d1:ee:97:06:
         18:f4:2c:53:fa:4c:13:4e:bf:a2:c8:9c:2b:65:98:69:bd:84:
         c7:80:34:7b:bd:0f:5a:e0:9d:52:d4:42:b9:85:f3:a4:2d:0e:
         95:e2:76:02:ee:67:08:5d:f7:5c:7e:48:ee:59:6d:ef:52:09:
         00:df:1c:81:ad:6d:02:77:28:b6:5d:2b:0e:ee:19:a0:66:39:
         10:d4:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----