Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
File:                     0RIqXLBkP3NsfseWGAmiWThmjw4.cer (raw, json)
Hash identifier:          Qf3F7XOdGDFQp6clnf50AiU19FohHDX42nnP2hafxGc=
Subject key identifier:   D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942368EC25BED8A988B5C0CBC037355A27
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60354
                          IP: 185.251.112.0/22
                          IP: 2a0c:1940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:ec:25:be:d8:a9:88:b5:c0:cb:c0:37:35:5a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:2e:e9:b0:79:16:2c:37:95:ce:4e:aa:67:
                    36:38:0b:0f:7b:91:1a:91:0c:33:34:61:e2:80:0a:
                    a5:b7:35:59:1b:3a:4b:86:1f:9a:70:d8:0a:b8:fd:
                    c7:a4:bb:d9:e4:7b:4d:f2:66:30:ea:04:df:45:6f:
                    85:32:e9:34:bb:12:18:8e:2c:27:b9:8c:2c:84:c3:
                    f7:0c:97:33:76:dd:4e:79:6c:4f:98:a0:7c:82:05:
                    74:a2:69:cf:48:41:9b:ef:52:5e:09:30:2d:3d:91:
                    2e:1c:03:19:81:44:62:d4:9d:30:67:57:94:41:e4:
                    a6:a1:19:0f:ed:25:c8:e6:91:08:33:10:9d:43:7e:
                    73:6b:18:e6:b8:88:f8:65:9f:25:b2:55:84:8a:2f:
                    08:b5:d1:02:c5:29:47:fa:db:c9:b2:ed:c7:cb:9e:
                    e1:50:03:99:4e:bc:f2:a3:5c:b0:05:80:f0:4f:c6:
                    12:38:82:fa:4a:5a:d2:74:d3:4d:9b:d2:6b:3c:d8:
                    a4:c7:fe:b2:8b:26:9d:6f:a7:54:3c:98:e6:ac:aa:
                    44:2a:3f:80:f4:56:24:af:74:d4:e0:ce:52:3d:58:
                    58:fd:cf:37:9a:eb:a3:37:f6:5e:ea:63:35:79:19:
                    fc:d5:86:42:50:a6:1d:18:60:fb:5c:f3:8f:14:f6:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.112.0/22
                IPv6:
                  2a0c:1940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60354

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:ab:b8:93:d5:5e:c8:82:b2:66:6e:48:66:62:16:24:4b:
         62:c2:56:e6:ad:9a:ce:e4:99:fe:74:fd:3d:07:45:76:85:4d:
         43:4f:c5:11:c2:6d:24:b9:57:7d:f5:3a:a9:5e:da:ee:ae:3d:
         f9:78:5f:fc:dd:96:d0:b3:ce:97:30:82:3c:47:d6:25:dd:71:
         e0:80:ef:dd:de:78:c7:9b:ed:e8:a2:7b:cd:ab:b6:af:ea:94:
         f6:33:c0:9f:8c:b0:3f:32:50:a6:9c:15:8e:95:29:0f:7a:cc:
         42:ec:08:cb:8c:38:54:7c:75:36:16:32:2b:56:09:b6:09:fe:
         4b:72:65:49:b2:f8:f7:b5:db:72:05:94:c8:35:ba:f3:70:d9:
         40:6c:8e:90:38:37:8e:e8:f0:79:6b:2b:e2:07:13:cd:1b:97:
         82:39:48:68:ef:c4:38:19:3f:c4:c4:26:bf:c8:de:e5:9b:cf:
         5d:54:a3:05:54:1b:67:19:e1:ab:7b:10:d4:86:68:2e:1a:3e:
         e0:fb:4a:b3:1f:cb:9d:71:f8:99:ea:47:36:68:b0:96:8c:c5:
         2a:e4:b9:ff:dd:3b:a4:f5:2d:94:83:59:d6:1b:fe:75:5f:92:
         ab:5a:d6:47:cc:dd:65:b8:91:2b:82:0c:0e:0a:7e:59:7f:a3:
         54:7f:ec:78
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQjaOwlvtipiLXAy8A3NVonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTEyMmE1Y2IwNjQzZjczNmM3ZWM3OTYxODA5YTI1OTM4NjY4ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiIu6bB5Fiw3lc5Oqmc2OAsPe5Ea
kQwzNGHigAqltzVZGzpLhh+acNgKuP3HpLvZ5HtN8mYw6gTfRW+FMuk0uxIYjiwn
uYwshMP3DJczdt1OeWxPmKB8ggV0omnPSEGb71JeCTAtPZEuHAMZgURi1J0wZ1eU
QeSmoRkP7SXI5pEIMxCdQ35zaxjmuIj4ZZ8lslWEii8ItdECxSlH+tvJsu3Hy57h
UAOZTrzyo1ywBYDwT8YSOIL6SlrSdNNNm9JrPNikx/6yiyadb6dUPJjmrKpEKj+A
9FYkr3TU4M5SPVhY/c83muujN/Ze6mM1eRn81YZCUKYdGGD7XPOPFPYlVQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNESKlywZD9zbH7HlhgJolk4Zo8OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2FjY2Qz
OC0wYWU2LTRiNDMtYTE2OC0xMTUyZjQzOTMwMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvYWNjZDM4
LTBhZTYtNGI0My1hMTY4LTExNTJmNDM5MzAyMC8xLzBSSXFYTEJrUDNOc2ZzZVdH
QW1pV1RobWp3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuftwMA0EAgACMAcDBQMqDBlAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDrwjANBgkqhkiG9w0BAQsFAAOCAQEAPUyruJPVXsiC
smZuSGZiFiRLYsJW5q2azuSZ/nT9PQdFdoVNQ0/FEcJtJLlXffU6qV7a7q49+Xhf
/N2W0LPOlzCCPEfWJd1x4IDv3d54x5vt6KJ7zau2r+qU9jPAn4ywPzJQppwVjpUp
D3rMQuwIy4w4VHx1NhYyK1YJtgn+S3JlSbL497XbcgWUyDW683DZQGyOkDg3jujw
eWsr4gcTzRuXgjlIaO/EOBk/xMQmv8je5ZvPXVSjBVQbZxnhq3sQ1IZoLho+4PtK
sx/LnXH4mepHNmiwlozFKuS5/907pPUtlINZ1hv+dV+Sq1rWR8zdZbiRK4IMDgp+
WX+jVH/seA==
-----END CERTIFICATE-----