Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
File:                     TZGXarBr_68-KPhChts-4gPgfV4.cer (raw, json)
Hash identifier:          zoCGEiS5kT192nnyUYZLwYK++yevH85HPykn7OgborA=
Subject key identifier:   4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214433AC35D8CF4254F0A231B9B242F3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206814
                          IP: 77.247.197.0/24
                          IP: 2a12:b540::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:33:ac:35:d8:cf:42:54:f0:a2:31:b9:b2:42:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:92:37:01:81:71:67:d0:e0:54:14:51:5f:
                    f7:26:01:fb:1f:7b:8b:5b:58:91:0c:24:de:f4:ed:
                    7b:4d:03:b9:b9:c2:7b:99:83:14:bf:86:d7:c9:17:
                    d2:a7:31:08:f7:18:af:54:88:32:07:ad:d5:a4:a2:
                    02:25:e1:ff:87:85:2d:b1:73:34:d4:ee:c3:16:44:
                    80:06:2f:27:d0:bc:68:07:da:bb:a4:27:bb:d7:81:
                    49:18:11:29:86:41:77:56:02:e3:5a:ab:f4:fe:eb:
                    6f:88:64:e7:45:ba:e1:48:e6:7a:75:0e:e1:71:c6:
                    b4:89:9c:3c:d5:ef:de:b6:c5:16:46:d0:23:0c:ee:
                    82:c5:ef:58:7f:60:92:2d:78:bf:3b:01:b9:59:c6:
                    8c:d8:30:e2:53:48:7a:2e:81:58:99:20:90:56:2e:
                    e2:92:f8:d2:05:8b:27:93:9c:e1:ef:f2:66:6a:66:
                    f1:3f:4f:d0:51:0c:90:cd:1d:8e:29:fb:76:9e:2e:
                    32:da:b1:ae:6b:27:75:88:76:7c:d4:75:74:6e:0f:
                    bc:b6:cf:70:12:59:d6:27:f4:40:78:d9:d0:b0:67:
                    d9:2c:b3:b7:a9:8d:00:bf:54:47:ad:78:2d:ca:96:
                    05:d6:d3:b0:f5:b5:de:ad:b1:23:06:c1:0b:57:99:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.247.197.0/24
                IPv6:
                  2a12:b540::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206814

    Signature Algorithm: sha256WithRSAEncryption
         04:fd:50:af:6a:3a:0e:9f:01:4b:7a:92:f0:f4:45:0d:02:6c:
         d4:1c:a5:df:ee:87:60:60:0c:45:66:34:54:f8:c7:fc:29:4f:
         f0:39:48:6a:a5:37:4a:03:30:04:ff:26:3b:9d:e7:88:f1:21:
         69:7d:e3:7c:86:13:cc:65:79:3a:66:ba:03:54:77:0f:2d:01:
         2c:f8:49:f7:4f:a5:97:6a:52:7c:f0:7c:e7:21:a2:66:0a:9f:
         f8:27:36:32:d8:f2:21:69:0b:b3:e9:da:c8:02:40:14:d4:36:
         46:fd:ad:ce:9c:af:79:08:4a:54:e7:23:8b:82:9c:54:61:d3:
         8e:33:aa:69:08:bf:53:79:9f:35:f2:c5:5e:4a:4d:1c:ab:80:
         7a:a9:2b:3c:d2:ac:66:c1:6d:42:5b:a0:eb:bf:a3:5f:bb:4c:
         08:a8:a4:c1:0f:e8:6a:c5:c3:44:b5:2d:d2:a9:19:fe:21:91:
         5c:49:1e:85:10:bf:e1:90:40:84:44:67:58:9e:45:20:92:f3:
         5c:72:25:78:d9:0d:d9:02:8b:e3:69:67:bd:dc:5a:db:1b:9c:
         76:5f:1d:e9:96:6e:e7:ba:f7:0f:c8:0e:d2:49:97:6a:d9:53:
         df:df:ef:7c:37:54:cc:44:ee:34:43:36:79:9d:2c:b3:a7:76:
         f6:77:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----