Certificate

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/zq8hRMdXlcIjzBfKMFty0KS05PI.cer
File:                     zq8hRMdXlcIjzBfKMFty0KS05PI.cer (raw, json)
Hash identifier:          YNxxFlN+xZ9x4cz74l4GFbC69byukriNo8API2xjoyI=
Subject key identifier:   CE:AF:21:44:C7:57:95:C2:23:CC:17:CA:30:5B:72:D0:A4:B4:E4:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01A14F6313ADD7DAFAFDA5473E306BA9EEA0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 18 Oct 2026 14:20:55 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 219418
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:63:13:ad:d7:da:fa:fd:a5:47:3e:30:6b:a9:ee:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 18 14:20:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ceaf2144c75795c223cc17ca305b72d0a4b4e4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:07:ed:a9:67:92:5a:15:1c:b8:fb:f4:1b:
                    c6:87:f5:fa:76:ec:be:a1:b0:d1:1e:1b:ab:06:65:
                    33:84:01:2c:9d:9f:c9:d9:b7:58:6e:ab:7c:d6:fe:
                    1d:d8:6e:15:79:94:de:d0:9f:7f:90:fc:23:75:a2:
                    04:96:8b:71:49:e2:f0:17:dd:b0:b1:ae:15:22:fe:
                    8d:e6:a6:ad:3f:81:f7:4e:ee:fa:8f:96:3a:46:89:
                    22:ec:40:a8:0a:9b:f8:00:c9:84:2f:b4:f4:50:d0:
                    72:b7:00:b3:17:b3:e0:dc:9a:f6:e4:dc:9a:87:3a:
                    cf:d0:a8:a1:53:2a:05:7c:fe:6b:c5:18:9b:9c:e5:
                    5a:81:19:73:f7:e5:b3:f0:da:34:1c:ce:7f:77:12:
                    d1:50:c3:a4:3a:bb:72:94:32:07:2c:eb:72:96:d2:
                    c4:14:1f:34:cc:cd:97:96:f0:d9:7c:80:14:ea:87:
                    c1:f5:6d:2e:0c:31:70:3f:1f:00:06:4b:14:7b:a0:
                    6e:66:b0:24:c7:45:2a:98:df:58:9a:99:f2:18:78:
                    0b:ab:ca:e9:2a:34:1f:09:f3:0e:87:99:19:8d:fe:
                    7f:98:a2:26:cc:5a:94:bd:2a:15:07:d4:e7:22:18:
                    83:42:e5:2f:f4:48:b1:f3:95:b7:b7:47:c3:d2:30:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AF:21:44:C7:57:95:C2:23:CC:17:CA:30:5B:72:D0:A4:B4:E4:F2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219418

    Signature Algorithm: sha256WithRSAEncryption
         73:60:71:6c:8e:98:5e:98:6a:d5:f9:7a:13:c6:11:c9:2c:85:
         cc:23:10:d3:6d:8c:eb:b5:89:19:f5:dd:dc:fe:74:73:5c:4e:
         8b:cd:62:5c:cd:42:35:2c:33:b8:1f:d5:01:5c:ae:53:c7:a7:
         47:49:58:3f:7f:30:93:bb:61:83:e9:23:6a:0f:10:46:01:18:
         cf:6d:6c:9b:5a:fd:8c:8b:7d:95:74:f9:60:08:a7:93:5e:02:
         f2:07:a2:1f:69:08:18:76:f9:d7:37:de:11:77:3a:cd:d1:ce:
         8c:c4:22:19:d2:4c:11:36:df:db:65:7b:4d:1a:eb:40:e7:4f:
         e1:bf:2c:b1:29:2b:b8:e4:b9:1a:da:49:70:ad:46:a9:8b:1e:
         df:b9:a3:36:a8:71:8d:ec:57:0b:5d:d2:59:c2:bf:e2:9b:dc:
         df:e1:12:bd:6a:76:05:5b:0d:56:65:2a:84:58:64:47:cc:a6:
         7b:4b:dd:26:c9:7c:a1:8d:bd:fe:55:8b:b3:e2:2e:65:85:5e:
         ee:81:0e:e3:a8:55:19:80:7d:71:f4:c3:ce:60:72:54:8a:ba:
         07:6e:8b:b7:d7:90:cd:a0:5c:be:5c:a7:34:0b:a1:30:6e:e7:
         c0:6d:55:ea:14:54:40:aa:a9:3f:d4:c1:37:d9:59:42:e4:5d:
         65:2b:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----