Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
File:                     zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer (raw, json)
Hash identifier:          l5MZXL1zHALh2aiUSIr78QpKpFqkUalQuNmH8Wdn8MI=
Subject key identifier:   CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9C0C0259866E08AE6378CC919CE11
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206854
                          IP: 185.172.212.0/22
                          IP: 2a0f:c7c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:c0:c0:25:98:66:e0:8a:e6:37:8c:c9:19:ce:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:a5:0b:f9:73:22:16:b8:fd:4e:05:1e:d3:
                    b6:a8:50:f7:bd:02:09:08:34:ea:65:56:bf:59:a6:
                    da:05:c4:20:5a:a8:5d:73:03:7a:b0:c7:6f:30:b2:
                    69:d5:2b:24:87:28:c4:f4:89:f4:ed:d8:a1:6d:09:
                    b9:f7:05:e5:f2:b5:0a:c2:c0:47:2d:bd:98:90:c8:
                    60:60:ca:8c:28:a1:c1:ba:66:14:c7:34:75:7e:2c:
                    8f:63:82:8e:fc:f8:64:84:53:e9:3a:e2:e6:0a:65:
                    e1:4b:f1:f7:c8:58:71:7a:ad:2f:e7:ca:c9:2d:96:
                    ef:1f:bc:7a:ed:ca:48:cd:a2:c9:3e:10:ad:fe:1a:
                    2e:7d:93:4f:a6:78:43:d0:ef:71:10:70:61:5e:0a:
                    2f:0d:b5:cf:fb:c7:49:6b:69:bd:f3:ff:0b:3f:b6:
                    53:3b:a3:95:fb:8d:e4:e8:1d:2a:5a:5c:c6:99:49:
                    91:db:09:8d:76:62:5e:3e:6f:27:2a:f4:85:57:81:
                    72:13:83:3a:5c:52:13:b2:29:9e:53:bc:02:0e:58:
                    ac:1f:5c:e4:b6:24:21:38:5d:b2:e5:24:03:df:c2:
                    aa:22:65:2b:e4:69:58:06:62:36:82:d4:47:96:19:
                    f6:be:45:cb:df:c8:35:b4:bc:be:61:d8:34:63:fc:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.172.212.0/22
                IPv6:
                  2a0f:c7c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206854

    Signature Algorithm: sha256WithRSAEncryption
         4c:dc:91:1a:d1:9a:83:d9:08:88:65:9f:be:4b:aa:f6:55:78:
         d5:d1:35:bd:b4:ce:ae:9b:b1:32:dc:35:2d:27:09:c9:f0:c2:
         ac:b2:74:7c:40:92:7f:5b:be:42:d8:aa:63:e2:36:84:87:24:
         45:bc:db:6e:52:9a:39:00:eb:af:f0:bd:1f:89:c7:6a:9d:74:
         8c:94:40:d0:fb:93:12:a3:f0:58:b6:cf:c7:ef:08:b5:4c:11:
         c7:1f:bc:e8:36:1d:f3:73:71:e3:a6:e5:45:a4:2e:55:d8:32:
         16:0d:16:0e:33:c3:c4:0d:7c:7e:1c:13:45:54:04:7c:cd:dc:
         9d:fe:07:ed:40:d3:f3:5a:5e:ab:d8:75:ec:14:96:38:73:f0:
         69:1f:dd:12:39:f2:47:33:11:94:ed:34:2b:15:1d:24:41:ae:
         f6:79:cb:0f:40:1b:c1:a9:3d:e1:bb:1e:29:bf:aa:a9:ec:17:
         87:18:89:87:21:aa:16:54:f1:3c:1b:25:e8:28:2c:64:42:55:
         7e:b4:b5:55:63:97:3d:1d:3b:35:bb:75:c5:82:9a:f4:8d:38:
         98:58:49:80:69:b3:f6:d7:c2:b1:9e:40:92:59:76:59:d5:6c:
         53:0d:56:56:13:f3:b0:63:8a:d0:8f:4c:58:8b:02:e9:13:41:
         09:bf:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----