Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
File:                     zZGetcIQg2AVXef7TyFqBVrjHwk.cer (raw, json)
Hash identifier:          hSk44wU/7ZlxwRyvzdXSVT363zisvQZHfxZMd4eTOqo=
Subject key identifier:   CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B7944BDF5D1B3848B12E4D89B6038
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57004
                          IP: 185.191.200.0/22
                          IP: 2a0a:1cc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:79:44:bd:f5:d1:b3:84:8b:12:e4:d8:9b:60:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:a6:8d:a2:e2:c4:ef:b3:7e:02:9c:eb:9d:
                    b3:bb:82:14:35:0f:b5:87:c2:d0:89:70:08:32:38:
                    e8:fc:c7:74:fb:2b:7a:2b:44:6d:f7:b9:17:03:86:
                    a2:b5:95:b9:28:29:53:c6:0f:92:fb:11:91:00:23:
                    9d:18:82:c1:4a:9a:11:f0:fc:74:3f:9f:2c:d8:a2:
                    75:8c:67:78:f3:18:bb:4e:84:12:6d:53:78:30:f1:
                    af:be:64:6b:9e:82:9b:08:01:bc:1e:b0:82:ea:19:
                    13:82:0b:db:92:40:b7:f5:1f:16:e1:fd:fe:66:8d:
                    23:4a:16:eb:76:8c:20:52:bf:38:28:82:77:e2:0f:
                    02:b9:1a:ef:05:3a:84:c5:32:b6:4b:8c:36:18:fb:
                    db:46:57:08:f6:9c:4f:b7:b7:de:a4:a5:4a:23:dc:
                    f7:f8:38:f0:13:db:a7:a6:bf:a3:72:fd:37:e5:16:
                    2b:d8:1f:69:b3:1c:51:0d:a5:93:be:5f:11:81:06:
                    88:98:4e:01:62:cc:1d:10:17:5e:42:fe:31:35:ef:
                    88:28:31:bf:e4:fe:aa:db:49:60:6e:16:e5:3c:b6:
                    b1:4d:92:42:32:f9:1a:d5:c3:86:b2:f3:f8:ca:39:
                    cb:71:82:83:a5:ed:de:5b:67:7d:3e:f4:34:fc:be:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.191.200.0/22
                IPv6:
                  2a0a:1cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57004

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:73:c3:2a:77:f3:1c:6a:b1:7f:4f:87:e0:dd:2e:d8:75:
         4f:e1:2a:b2:28:38:8f:bf:d9:d9:60:f5:61:dc:9d:e3:60:92:
         61:ea:57:fe:d7:04:d0:0a:e3:f2:52:43:6f:93:00:e8:25:b6:
         a8:fe:11:cf:16:56:7a:14:e6:fe:4e:0a:d0:b8:61:6b:c2:be:
         57:b7:d6:01:bf:22:fa:5d:31:df:32:be:fc:16:e9:43:fd:48:
         43:9a:52:54:49:19:d0:77:b9:df:93:2e:bf:5c:d1:0d:68:04:
         d1:58:9b:e8:6e:9d:d5:d9:6d:e0:8a:59:53:18:c6:66:5d:fa:
         82:2a:0f:2e:d0:45:6c:26:ac:5c:12:b5:55:d8:bc:8a:c3:28:
         20:7f:75:4a:79:78:b6:a6:be:62:b3:29:1a:f1:3a:de:59:36:
         cd:71:85:7a:91:94:82:ae:bc:48:e1:50:fb:6b:47:14:44:86:
         b9:c6:d2:2f:3d:f7:7e:86:09:c7:72:72:a1:ec:d2:55:a4:07:
         d6:82:7a:71:48:7e:30:d9:4c:cd:f0:b9:b6:d3:b8:bb:38:2e:
         f2:ac:cd:1b:16:4b:6f:48:46:77:98:a4:e5:13:26:67:47:0e:
         cf:de:b0:90:2d:ff:2f:45:ad:78:dd:22:79:9f:43:43:d1:f0:
         2f:7a:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----