Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
File:                     xDzur3eV-33zSLBLIn5QpJoaG3w.cer (raw, json)
Hash identifier:          FSJAVsvfNyS1FwVyPAJHXE48kQ76gkaIsVqCD8Np6do=
Subject key identifier:   C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA17E52B1609CF1A9C0B28AB5AE1B7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198604
                          IP: 91.237.84.0 -- 91.237.86.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:17:e5:2b:16:09:cf:1a:9c:0b:28:ab:5a:e1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:f1:6e:1b:31:99:c8:dd:ef:94:ba:ae:f5:
                    31:82:63:8c:03:29:35:5d:8a:6b:e1:6e:7d:3b:32:
                    aa:08:ad:67:9b:11:2c:0e:04:41:85:bc:21:45:62:
                    5f:4a:e4:2c:ff:7d:b8:1e:c9:de:a6:41:44:17:8d:
                    07:8d:67:89:83:a8:0b:83:1a:17:b0:51:0a:b1:96:
                    d2:9b:99:ab:0f:84:26:88:03:f8:af:dc:a3:08:12:
                    9c:2f:9e:b0:f5:98:04:ff:2b:02:6c:08:5c:ea:05:
                    cc:a7:74:10:f7:4f:97:d0:8a:d4:2d:d8:f5:0d:24:
                    6d:29:2a:d6:c2:14:81:d0:65:7b:77:27:b8:96:fe:
                    ed:e8:72:23:67:12:7b:d6:1f:40:25:5c:d8:77:7f:
                    31:d4:92:25:54:a2:ab:94:db:d8:a0:5a:0e:93:70:
                    bd:ad:ca:53:84:b8:41:2f:c2:f3:93:39:89:cb:1c:
                    9d:29:04:23:be:aa:c7:88:42:d1:c3:8c:73:e8:fa:
                    8b:ba:b0:19:1f:05:a1:1c:f4:ef:ee:f2:1e:c7:d7:
                    c1:6d:32:d6:61:e7:ac:e5:ef:a2:b9:ea:78:bf:fb:
                    37:4c:e7:83:4d:71:a2:35:bc:d9:3d:91:fa:29:1a:
                    35:a5:5d:ad:be:4c:7b:98:14:1f:00:89:a5:a5:b7:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.84.0-91.237.86.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198604

    Signature Algorithm: sha256WithRSAEncryption
         12:91:a5:b7:b5:36:52:6c:2f:25:49:e2:61:2f:62:c9:fa:0a:
         8e:61:b3:28:f2:19:05:57:97:9c:29:1e:f3:2b:9f:73:80:ce:
         ac:5b:2a:1e:76:ef:17:2a:20:fd:c2:25:3c:fb:15:1d:a2:1f:
         2c:37:41:1a:63:a4:18:e2:05:fc:1d:8d:97:fe:24:e7:f5:13:
         ac:66:6d:b0:8a:be:b8:6b:27:f6:f1:73:72:7f:43:c8:7d:6f:
         22:53:c1:8e:2d:26:4e:11:96:94:cc:1c:8f:66:c0:ec:f8:c9:
         1c:4f:54:8b:b2:3c:da:5e:80:63:ec:de:28:76:58:40:37:ee:
         c2:44:c3:07:94:9b:ce:ba:aa:52:8e:4d:3d:83:69:df:a3:6c:
         38:4d:8c:50:8b:eb:2a:b8:7b:c8:d1:59:d5:d0:ce:3d:6a:39:
         bb:20:be:ff:48:bf:95:99:27:bb:7a:ed:18:2b:a7:99:93:51:
         b9:78:f6:8d:3e:26:4b:0a:04:94:37:44:f6:53:30:79:2c:8d:
         59:d9:50:f6:ef:a6:06:ed:86:fb:ed:bc:f7:2f:d3:8a:76:c2:
         29:4b:0b:c1:6b:0d:fb:d1:3c:b4:b1:b3:83:84:31:97:ef:95:
         63:19:ad:a7:cc:f1:4b:c2:68:4a:ea:f8:b8:3f:0c:c6:10:ea:
         64:83:8c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----