Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
File:                     zr9l4AadvMdre1VujB1wWInfJ-k.cer (raw, json)
Hash identifier:          chOvu9QSKKVLoeky/hRfYjYQ0QOKfEQKMThXvcmBIxo=
Subject key identifier:   CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942368F5E1736EF4D2F023BAFD0803A359
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202364
                          IP: 185.119.108.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:f5:e1:73:6e:f4:d2:f0:23:ba:fd:08:03:a3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:9c:e4:a4:7f:ab:5a:68:94:1f:e1:c7:12:
                    fc:db:5e:ff:9a:68:d3:a0:54:e3:81:ce:c8:29:ea:
                    25:e4:6f:3e:7b:95:2c:fc:cf:3d:03:01:ba:af:e8:
                    fe:62:49:e1:4a:f8:17:72:c5:94:d6:bd:1c:f6:cd:
                    f1:74:bd:09:1e:b7:ee:7e:9d:dc:67:0d:8c:17:02:
                    1f:a1:6e:35:bc:fc:ac:c2:4d:da:cf:7a:ce:3a:c8:
                    7d:11:83:c2:31:f8:e7:91:75:04:d3:fe:8e:02:7a:
                    33:94:48:74:e9:f4:11:e6:a9:80:d6:d6:57:88:10:
                    a6:9a:30:6b:8c:48:2b:2e:3f:cf:96:ca:a5:9b:d1:
                    82:7c:38:ae:90:54:8d:49:58:3c:62:9d:74:8a:bd:
                    2f:27:45:7e:5f:54:b4:af:49:c0:0d:77:fa:71:cd:
                    57:e8:1d:81:6c:45:51:d9:86:ff:b0:38:9d:cb:c5:
                    69:c4:47:ed:94:6a:86:66:0c:b1:50:4f:34:e8:a7:
                    42:97:8b:4a:27:60:80:ef:a1:13:29:15:c6:aa:58:
                    36:73:16:26:26:2b:b4:6c:6e:2d:bb:8d:b0:bd:71:
                    57:f9:6d:47:85:e2:df:c0:be:ba:dd:38:d9:d1:18:
                    a7:df:1a:6b:1f:9c:3d:4b:ab:0b:30:c8:67:9e:49:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.119.108.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202364

    Signature Algorithm: sha256WithRSAEncryption
         34:04:35:af:ac:be:8a:22:2a:35:5e:5f:c2:07:af:5f:a4:16:
         30:96:3e:6b:4e:3d:76:db:ef:d5:5a:76:1f:15:eb:b2:16:16:
         32:5b:b5:25:30:37:93:61:1e:b1:5d:be:e7:45:55:55:7b:aa:
         c6:13:25:6e:bc:3a:96:6f:2c:42:52:bc:16:03:5d:7e:00:eb:
         0e:34:58:d3:ca:23:c4:c9:80:7e:e5:34:82:06:1c:49:6c:d8:
         cb:97:15:a3:50:bf:a9:7c:30:08:e7:15:86:e3:e8:9d:d8:d4:
         7b:53:67:76:cb:c2:ee:a6:da:57:56:86:f8:0b:04:c3:03:9f:
         9b:0c:3a:a3:33:13:04:fd:b1:21:2f:56:a5:92:b8:7b:56:9c:
         e0:1e:e5:76:7d:2d:52:a2:94:e0:e3:33:ce:f3:69:86:a1:b9:
         f8:44:a2:d9:f9:c0:d7:1e:98:a0:99:b4:7c:1d:a6:41:2d:2e:
         24:00:37:68:bc:39:c7:aa:85:1d:9c:6c:97:c1:0c:cd:57:6d:
         f7:7d:55:b8:3f:93:7d:0c:3f:dc:ea:00:2d:af:52:a2:76:0d:
         26:84:d3:41:17:be:f9:89:0e:51:fe:5f:e1:4f:f5:b4:da:ce:
         3d:14:89:cc:44:f4:8d:33:97:07:83:a1:b9:f4:c5:23:19:d3:
         2c:c0:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----