Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
File:                     ZrB43tN1kjDKLho76QZjjRMGuQg.cer (raw, json)
Hash identifier:          2J32r3nsZkHb5gpGNi1ZqmalQTaGLj1cCJ1ubVwWiPM=
Subject key identifier:   66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BFC5D68DAF06AC7CBC153DA4DF71D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51400
                          IP: 77.87.240.0/21
                          IP: 2001:67c:2190::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:fc:5d:68:da:f0:6a:c7:cb:c1:53:da:4d:f7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=66b078ded3759230ca2e1a3be906638d1306b908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:95:88:56:ac:47:62:f7:b1:eb:ac:03:ea:
                    9f:a4:24:4f:ca:b4:07:11:29:c8:87:e6:0c:b1:13:
                    e9:97:15:e5:c8:5d:a0:47:d9:4a:81:44:be:de:e7:
                    20:4a:4a:8e:80:bd:b2:8a:5f:82:2f:10:f7:18:b2:
                    35:ae:47:ef:51:26:42:a0:25:d2:2c:b4:27:23:5d:
                    a6:14:5d:23:79:90:3f:34:6a:1a:e1:3e:55:38:d4:
                    18:e5:be:a1:dd:1d:0a:1d:94:1d:74:14:24:68:c3:
                    70:52:a3:24:f2:81:aa:29:c9:1a:cb:52:c1:40:7a:
                    49:1d:55:88:d1:1e:b8:a1:d2:2c:62:b7:f9:06:c0:
                    b6:88:a5:a1:5f:04:1e:8d:09:ea:d6:b2:04:c3:dd:
                    dd:8a:ed:84:98:7f:4d:13:61:b2:15:5f:89:cd:99:
                    b0:2f:d9:48:0f:95:67:cc:50:f9:c3:dd:80:77:73:
                    b7:8e:bb:c9:37:8b:51:bc:60:56:62:9e:8a:df:ca:
                    9a:94:8f:55:73:9c:82:75:a5:d9:09:2b:1b:5e:2a:
                    1a:c9:35:9f:16:69:fc:7e:4e:9d:16:b8:2b:a3:73:
                    78:7c:2f:26:80:56:a5:06:70:8e:b4:ce:e5:8b:71:
                    fa:d5:25:03:0d:e9:b0:0d:2f:75:03:30:fa:42:88:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.240.0/21
                IPv6:
                  2001:67c:2190::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51400

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:a8:c8:d4:da:91:52:76:03:a2:08:d2:0a:54:b7:a5:a1:
         f1:6f:42:6d:f7:3d:28:c4:de:62:45:2c:8e:9c:8c:df:a9:55:
         84:8c:02:fb:51:fe:17:c5:d2:8c:a3:41:ad:06:e8:40:2b:bc:
         35:3d:ba:29:ef:38:d0:48:81:bc:3b:7e:dc:07:2d:e2:17:40:
         a5:49:c5:da:59:03:8d:0d:aa:c9:a5:13:b9:33:60:4c:34:48:
         cf:26:29:0e:aa:e9:08:11:d6:75:a5:15:19:f8:7b:a0:bd:e3:
         5a:5d:b5:cf:e0:02:e4:f1:cb:95:44:43:db:40:49:19:76:7c:
         29:d9:1a:ca:9d:bc:10:2a:7c:31:9f:96:c1:86:40:85:b3:22:
         10:fc:a8:2e:28:54:87:06:7f:5b:38:2d:54:13:a1:77:ea:ce:
         01:0b:54:f4:92:62:e5:f4:9f:9d:68:4e:ba:cc:fd:9d:10:0b:
         07:e1:47:6a:ab:d3:67:10:b4:dd:03:35:7e:37:87:4d:4a:c5:
         7e:0a:60:34:4c:c9:d7:f9:4e:9f:3a:b0:9f:98:14:f6:02:f1:
         24:7f:dd:92:35:3a:e0:1c:e3:f0:ab:c2:a6:0a:88:66:f1:92:
         4f:41:6d:df:78:3f:c3:64:72:9e:08:1c:dc:a4:11:d6:0a:b2:
         5b:71:ff:2b
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQma/xdaNrwasfLwVPaTfcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmIwNzhkZWQzNzU5MjMwY2EyZTFhM2JlOTA2NjM4ZDEzMDZiOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk2ViFasR2L3seusA+qfpCRPyrQH
ESnIh+YMsRPplxXlyF2gR9lKgUS+3ucgSkqOgL2yil+CLxD3GLI1rkfvUSZCoCXS
LLQnI12mFF0jeZA/NGoa4T5VONQY5b6h3R0KHZQddBQkaMNwUqMk8oGqKckay1LB
QHpJHVWI0R64odIsYrf5BsC2iKWhXwQejQnq1rIEw93diu2EmH9NE2GyFV+JzZmw
L9lID5VnzFD5w92Ad3O3jrvJN4tRvGBWYp6K38qalI9Vc5yCdaXZCSsbXioayTWf
Fmn8fk6dFrgro3N4fC8mgFalBnCOtM7li3H61SUDDemwDS91AzD6QojAlQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFGaweN7TdZIwyi4aO+kGY40TBrkIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzc2MzU5
Mi1hNDgwLTQ0NGYtYTg4MS00MDJlNjJjNTRkMzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzYzNTky
LWE0ODAtNDQ0Zi1hODgxLTQwMmU2MmM1NGQzMi8xL1pyQjQzdE4xa2pES0xobzc2
UVpqalJNR3VRZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQDTVfwMA8EAgACMAkDBwAgAQZ8IZAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAMjIMA0GCSqGSIb3DQEBCwUAA4IBAQB6oajI1NqR
UnYDogjSClS3paHxb0Jt9z0oxN5iRSyOnIzfqVWEjAL7Uf4XxdKMo0GtBuhAK7w1
Pbop7zjQSIG8O37cBy3iF0ClScXaWQONDarJpRO5M2BMNEjPJikOqukIEdZ1pRUZ
+HugveNaXbXP4ALk8cuVREPbQEkZdnwp2RrKnbwQKnwxn5bBhkCFsyIQ/KguKFSH
Bn9bOC1UE6F36s4BC1T0kmLl9J+daE66zP2dEAsH4Udqq9NnELTdAzV+N4dNSsV+
CmA0TMnX+U6fOrCfmBT2AvEkf92SNTrgHOPwq8KmCohm8ZJPQW3feD/DZHKeCBzc
pBHWCrJbcf8r
-----END CERTIFICATE-----