Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
File:                     1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer (raw, json)
Hash identifier:          ynbj0ZCLXu43DmOPy8bwnmIGNHOcHwgZ0AzNd06KwiI=
Subject key identifier:   F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236930701C3AC361C46A839E1CF41E34
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35800
                          IP: 194.88.152.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:30:70:1c:3a:c3:61:c4:6a:83:9e:1c:f4:1e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f970877985b0c5cf69167c91e837424c47d9a425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:48:6e:4d:56:42:f1:2f:73:6f:28:fb:22:
                    82:31:b5:bb:ab:3f:08:2c:62:bd:93:75:7c:7b:e6:
                    8c:ca:60:d7:27:40:da:e5:d6:cc:aa:f4:da:92:2d:
                    b1:74:a9:f6:d9:4c:98:c7:01:68:18:28:60:90:8b:
                    9f:44:22:a3:7d:55:74:b1:c3:d5:a6:4c:6c:75:89:
                    83:f6:55:2a:d9:7a:06:8f:7d:3f:fe:b5:c6:03:cc:
                    73:71:72:7d:e2:89:4f:3a:3a:ab:b8:16:63:7c:72:
                    a0:c4:df:67:d5:42:aa:4f:42:5a:b5:41:d9:37:0a:
                    d2:37:ef:b6:e0:95:30:28:53:3c:7e:9e:ea:36:58:
                    bf:29:d4:a6:c4:40:ef:bf:28:b2:9c:41:64:04:ba:
                    2f:88:38:0b:bc:51:3e:49:ef:36:0d:82:91:1e:10:
                    19:34:3d:55:99:d9:40:c9:8e:db:0f:a2:a3:d5:8e:
                    ba:75:0d:ed:ea:ba:7b:5d:c8:c8:82:2e:55:dc:2c:
                    75:d3:00:48:80:0e:d2:7d:aa:99:8b:70:93:92:24:
                    48:83:b9:5d:c9:37:93:93:ab:cd:c7:d4:9f:98:e5:
                    ab:4f:72:66:60:2c:4e:d5:5d:28:91:2b:43:ff:04:
                    9c:35:38:2b:b0:d8:70:14:67:77:45:d5:6c:eb:cb:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.88.152.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35800

    Signature Algorithm: sha256WithRSAEncryption
         70:da:a2:b9:47:c5:10:c5:7f:16:2c:c6:48:13:60:88:b6:d4:
         0c:a9:0e:ad:64:27:01:1f:ab:d2:4a:33:b6:08:f3:28:00:3b:
         4d:0f:ec:f0:87:78:8d:9f:25:e6:c7:45:ef:be:0e:16:24:9e:
         77:3e:53:db:43:f3:f5:cc:28:a1:68:ce:40:d0:ca:d3:b1:47:
         4c:c5:36:fc:de:52:f9:fb:d6:f6:09:b3:66:42:49:a8:ca:db:
         f9:78:ab:81:f5:98:0d:c5:b7:e7:64:e9:a6:6c:fb:7a:bf:ca:
         40:70:dd:ae:b7:d4:4d:82:fa:dc:fd:a9:bf:a9:c4:9c:47:0e:
         44:f1:3d:51:0e:97:9a:de:da:10:75:ea:40:a3:aa:b2:13:c2:
         7c:a4:74:dc:5a:40:9a:df:4e:cd:ba:70:66:47:e5:af:a2:31:
         6b:f9:da:37:17:61:14:52:40:67:83:37:c8:c6:a4:66:9e:da:
         82:d4:40:57:b3:c2:f1:47:a0:cb:83:af:73:e2:6b:69:e6:a7:
         e1:9e:6c:44:b6:b8:e4:2b:d8:27:ae:11:b4:66:49:7f:b7:69:
         d2:28:44:d7:a4:76:36:92:06:b2:51:f6:fe:8e:7c:d3:24:ec:
         95:39:53:d3:17:de:d5:ac:1e:50:bc:55:1e:c9:bf:36:73:e3:
         bc:1a:12:9c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZQjaTBwHDrDYcRqg54c9B40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTcwODc3OTg1YjBjNWNmNjkxNjdjOTFlODM3NDI0YzQ3ZDlhNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SBIbk1WQvEvc28o+yKCMbW7qz8I
LGK9k3V8e+aMymDXJ0Da5dbMqvTaki2xdKn22UyYxwFoGChgkIufRCKjfVV0scPV
pkxsdYmD9lUq2XoGj30//rXGA8xzcXJ94olPOjqruBZjfHKgxN9n1UKqT0JatUHZ
NwrSN++24JUwKFM8fp7qNli/KdSmxEDvvyiynEFkBLoviDgLvFE+Se82DYKRHhAZ
ND1VmdlAyY7bD6Kj1Y66dQ3t6rp7XcjIgi5V3Cx10wBIgA7SfaqZi3CTkiRIg7ld
yTeTk6vNx9SfmOWrT3JmYCxO1V0okStD/wScNTgrsNhwFGd3RdVs68ua6QIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFPlwh3mFsMXPaRZ8keg3QkxH2aQlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2Q5ZGI5
OC00MDEwLTQzMjgtODQ0NS1lZWNmZTdmY2YxYzAvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDlkYjk4
LTQwMTAtNDMyOC04NDQ1LWVlY2ZlN2ZjZjFjMC8xLzEtWENIZVlXd3hjOXBGbnlS
NkRkQ1RFZlpwQ1UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcJYmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAi9gwDQYJKoZIhvcNAQELBQADggEBAHDaorlHxRDFfxYsxkgTYIi21AypDq1k
JwEfq9JKM7YI8ygAO00P7PCHeI2fJebHRe++DhYknnc+U9tD8/XMKKFozkDQytOx
R0zFNvzeUvn71vYJs2ZCSajK2/l4q4H1mA3Ft+dk6aZs+3q/ykBw3a631E2C+tz9
qb+pxJxHDkTxPVEOl5re2hB16kCjqrITwnykdNxaQJrfTs26cGZH5a+iMWv52jcX
YRRSQGeDN8jGpGae2oLUQFezwvFHoMuDr3Pia2nmp+GebES2uOQr2CeuEbRmSX+3
adIoRNekdjaSBrJR9v6OfNMk7JU5U9MX3tWsHlC8VR7JvzZz47waEpw=
-----END CERTIFICATE-----