Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
File:                     1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer (raw, json)
Hash identifier:          neF/Jmg92VkGia5uAqJY586cZoJlMoaeydUkprY5wiw=
Subject key identifier:   F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3DC2EECB61302FDDBA702707C559E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57926
                          IP: 195.46.39.0/24
                          IP: 2001:67c:2778::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:dc:2e:ec:b6:13:02:fd:db:a7:02:70:7c:55:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:81:9f:8e:50:6b:b8:21:5d:2f:46:5d:c8:
                    17:1a:7c:52:be:8b:bc:95:be:fd:8b:6f:17:b2:ce:
                    e8:c4:80:48:9b:67:8d:b9:80:e2:de:d6:59:04:00:
                    2e:f4:53:7c:7c:76:ba:2e:9c:2f:46:bc:3d:b2:a2:
                    37:0b:4f:34:53:d6:8d:ba:be:68:fa:c1:b4:b1:5a:
                    95:b5:2d:34:7c:31:a8:c3:a0:a6:55:ac:3e:14:4f:
                    65:66:50:2f:b3:15:fa:03:72:a4:db:72:6d:e5:94:
                    e8:f5:f9:0a:54:9f:88:0d:a1:41:85:65:63:2c:be:
                    fe:31:80:ee:04:f9:89:f4:c1:83:28:e5:c8:5e:97:
                    89:70:4e:e3:4a:c6:d7:8f:1b:55:d0:f1:f4:0c:42:
                    bb:36:9b:c1:34:a4:47:a5:17:ad:2f:b7:03:72:88:
                    71:33:6c:85:65:58:37:00:1f:9a:c0:94:33:b3:c6:
                    25:00:f4:15:be:e7:4a:2e:58:7f:3c:4d:11:44:3c:
                    16:e3:f3:01:2c:c0:cf:7a:38:b7:b0:aa:2d:a4:c0:
                    d6:e2:7e:44:8b:66:b4:7b:70:dd:c0:34:d4:4a:39:
                    aa:50:63:a7:51:35:5b:b5:2c:66:ca:8b:6d:3d:18:
                    27:12:e1:87:5d:7e:52:20:ba:b8:96:d5:d0:06:09:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.46.39.0/24
                IPv6:
                  2001:67c:2778::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57926

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:9b:17:b8:70:ad:f7:02:b1:1f:f6:6c:67:0c:62:86:08:
         79:5d:be:d5:63:a7:ab:f5:9c:fb:40:72:b4:09:7a:1a:b0:e5:
         a6:73:b6:ef:70:e2:8e:8b:fd:b5:c6:69:43:d7:77:ba:3a:de:
         ad:47:6e:52:c0:8b:eb:21:0e:50:42:18:ff:a8:44:04:9f:16:
         5c:c0:34:48:71:cb:e2:be:f6:86:3e:e5:d3:c6:42:bc:6b:41:
         03:6a:7d:ae:f4:8d:ed:c5:b6:ae:8a:5c:93:fc:60:f1:93:29:
         0c:b1:5c:ba:ea:7e:97:6a:d1:d4:b4:1b:2a:dc:d3:ed:73:d0:
         7c:c5:c5:0f:86:0c:cf:f4:20:cd:00:4e:43:5b:7a:4c:11:b5:
         77:1d:14:0d:40:d0:b1:77:03:dc:53:3f:77:45:d0:76:89:00:
         d5:89:87:d3:78:8c:de:19:b4:2f:91:2d:9b:0c:92:ad:8d:b1:
         85:8d:a0:58:b6:a9:16:24:c3:8d:54:0d:ee:97:01:de:27:62:
         69:1a:ce:8c:d4:db:b4:5a:f8:00:d3:21:66:ac:1a:b6:fa:24:
         b2:51:b9:44:ac:e9:88:56:58:80:0d:f3:80:d4:e1:c8:82:2e:
         2c:57:a2:c9:a7:45:55:40:39:cb:0c:80:e1:64:b1:ba:b2:00:
         dc:04:2d:df
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZQks9wu7LYTAv3bpwJwfFWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGFhN2U0N2I5MWE2Mjk1Y2JmNzE4YzFmMmRkYjBhMjVjMjc2ZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN2Bn45Qa7ghXS9GXcgXGnxSvou8
lb79i28Xss7oxIBIm2eNuYDi3tZZBAAu9FN8fHa6LpwvRrw9sqI3C080U9aNur5o
+sG0sVqVtS00fDGow6CmVaw+FE9lZlAvsxX6A3Kk23Jt5ZTo9fkKVJ+IDaFBhWVj
LL7+MYDuBPmJ9MGDKOXIXpeJcE7jSsbXjxtV0PH0DEK7NpvBNKRHpRetL7cDcohx
M2yFZVg3AB+awJQzs8YlAPQVvudKLlh/PE0RRDwW4/MBLMDPeji3sKotpMDW4n5E
i2a0e3DdwDTUSjmqUGOnUTVbtSxmyottPRgnEuGHXX5SILq4ltXQBgmoKQIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFPiqfke5GmKVy/cYwfLdsKJcJ26yMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2RlNDk0
Zi01MTI5LTQ5ZjktOTI5ZS05NzBjODNlOTZjYmMvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZGU0OTRm
LTUxMjktNDlmOS05MjllLTk3MGM4M2U5NmNiYy8xLzEtS3AtUjdrYVlwWEw5eGpC
OHQyd29sd25ickkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEF
BQcBBwEB/wQhMB8wDAQCAAEwBgMEAMMuJzAPBAIAAjAJAwcAIAEGfCd4MBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDiRjANBgkqhkiG9w0BAQsFAAOCAQEAaeObF7hw
rfcCsR/2bGcMYoYIeV2+1WOnq/Wc+0BytAl6GrDlpnO273Dijov9tcZpQ9d3ujre
rUduUsCL6yEOUEIY/6hEBJ8WXMA0SHHL4r72hj7l08ZCvGtBA2p9rvSN7cW2ropc
k/xg8ZMpDLFcuup+l2rR1LQbKtzT7XPQfMXFD4YMz/QgzQBOQ1t6TBG1dx0UDUDQ
sXcD3FM/d0XQdokA1YmH03iM3hm0L5EtmwySrY2xhY2gWLapFiTDjVQN7pcB3idi
aRrOjNTbtFr4ANMhZqwatvokslG5RKzpiFZYgA3zgNThyIIuLFeiyadFVUA5ywyA
4WSxurIA3AQt3w==
-----END CERTIFICATE-----