Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
File:                     1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer (raw, json)
Hash identifier:          LgnMq8ke9u6G/kws2rmBnrgKrQ5AkEk3vLTO74eZV/Q=
Subject key identifier:   FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01954CADD958DCB2C0B147FF8492E384045A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 13:10:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207545
                          IP: 185.13.164.0/22
                          IP: 185.146.132.0/22
                          IP: 2a03:a3c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:4c:ad:d9:58:dc:b2:c0:b1:47:ff:84:92:e3:84:04:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 28 13:10:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:16:32:a7:fb:d6:c0:dc:ff:0c:b2:ba:03:
                    50:69:4b:36:d1:77:e1:5c:e1:7e:a6:e7:eb:dc:16:
                    af:fd:64:02:61:25:b4:2a:41:f2:3f:59:13:d8:dc:
                    bc:c2:43:17:fd:96:f0:17:c1:bb:2c:7a:5a:e3:b2:
                    61:23:27:3e:9c:d2:db:f8:2c:de:70:1f:7d:d1:68:
                    43:25:9e:04:6c:4b:68:4e:8d:ae:c8:30:01:09:7f:
                    cf:d1:31:5a:a0:0a:b9:32:84:85:37:94:e9:99:a8:
                    d6:69:29:ca:02:95:7c:c5:26:79:17:f0:28:3e:c0:
                    f3:29:6a:0b:f1:48:e9:af:07:02:68:fd:38:3c:61:
                    64:c4:8c:50:14:c5:88:73:05:60:66:0e:4c:76:16:
                    9a:89:6b:f8:f8:13:ff:c6:d7:a5:57:6e:bc:0a:9f:
                    ef:ff:a6:c9:6e:d3:88:b3:6a:10:9e:0d:03:52:d2:
                    db:aa:ed:6d:cc:3f:6e:25:d0:6d:5b:16:e9:af:50:
                    f2:b7:f7:64:64:a2:6a:2b:d7:30:2b:a4:94:92:c1:
                    ff:a8:2d:3e:bf:5f:03:0a:ee:d6:f6:1f:ff:40:e0:
                    ab:7f:a6:fc:d8:93:c5:85:06:e6:da:86:d3:6d:21:
                    aa:80:13:0d:f6:b9:53:8e:45:db:8b:13:7c:d0:92:
                    35:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.164.0/22
                  185.146.132.0/22
                IPv6:
                  2a03:a3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207545

    Signature Algorithm: sha256WithRSAEncryption
         a7:b6:d7:da:0f:77:fb:a0:45:5b:5d:7e:f0:f8:ea:c7:55:cc:
         8f:8d:e3:5b:c5:32:60:a1:2e:c6:b7:98:3e:2c:32:bd:16:20:
         14:39:74:4f:ea:25:12:68:bf:d9:08:48:d8:41:b7:a5:ea:18:
         cc:2e:6f:00:8c:e3:dc:64:3d:41:9a:27:66:df:b2:6d:29:1b:
         b8:d3:87:d8:f5:70:0e:f1:6f:01:64:44:f5:ef:b9:1c:25:74:
         8c:4f:0f:45:cf:6f:6a:3a:53:0a:e1:ee:34:87:4a:7b:53:44:
         1b:1e:96:7f:e5:0e:94:e9:7e:56:e8:57:53:8e:15:0e:9d:1c:
         b3:0d:69:5d:e5:f0:68:7b:84:67:6b:7c:76:30:56:78:ad:c0:
         70:46:31:ef:13:49:40:41:a3:c6:c0:a8:c3:82:58:89:8f:38:
         40:60:60:3f:3f:90:54:31:01:9d:ff:b8:63:d3:40:8e:13:40:
         86:23:a7:05:38:33:a5:8f:54:8f:43:41:f5:23:62:5b:4e:e4:
         3e:09:57:4d:5b:4e:ec:39:3b:e2:a6:23:30:0a:07:f1:f8:82:
         3b:33:81:33:98:ef:01:14:96:3c:68:86:b0:61:94:fa:2b:f3:
         d9:7a:36:db:6b:be:53:9d:ea:ca:27:e5:d9:59:8f:cb:cc:2b:
         d0:25:7e:8a
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZVMrdlY3LLAsUf/hJLjhARaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI4MTMxMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYThjYjk0NmZlODYwMWEwZmQyYTFiM2U0MzgyYjZiMWRjMDQ0ZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6YWMqf71sDc/wyyugNQaUs20Xfh
XOF+pufr3Bav/WQCYSW0KkHyP1kT2Ny8wkMX/ZbwF8G7LHpa47JhIyc+nNLb+Cze
cB990WhDJZ4EbEtoTo2uyDABCX/P0TFaoAq5MoSFN5TpmajWaSnKApV8xSZ5F/Ao
PsDzKWoL8UjprwcCaP04PGFkxIxQFMWIcwVgZg5MdhaaiWv4+BP/xtelV268Cp/v
/6bJbtOIs2oQng0DUtLbqu1tzD9uJdBtWxbpr1Dyt/dkZKJqK9cwK6SUksH/qC0+
v18DCu7W9h//QOCrf6b82JPFhQbm2obTbSGqgBMN9rlTjkXbixN80JI1TwIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFPqMuUb+hgGg/SobPkOCtrHcBE9XMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzBkMjI3
MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQwNDcvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcw
LTVjNmYtNDJjZi1hNTYwLTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMt
UTRLMnNkd0VUMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF
BQcBBwEB/wQlMCMwEgQCAAEwDAMEArkNpAMEArmShDANBAIAAjAHAwUAKgOjwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDKrkwDQYJKoZIhvcNAQELBQADggEBAKe2
19oPd/ugRVtdfvD46sdVzI+N41vFMmChLsa3mD4sMr0WIBQ5dE/qJRJov9kISNhB
t6XqGMwubwCM49xkPUGaJ2bfsm0pG7jTh9j1cA7xbwFkRPXvuRwldIxPD0XPb2o6
Uwrh7jSHSntTRBseln/lDpTpflboV1OOFQ6dHLMNaV3l8Gh7hGdrfHYwVnitwHBG
Me8TSUBBo8bAqMOCWImPOEBgYD8/kFQxAZ3/uGPTQI4TQIYjpwU4M6WPVI9DQfUj
YltO5D4JV01bTuw5O+KmIzAKB/H4gjszgTOY7wEUljxohrBhlPor89l6NttrvlOd
6son5dlZj8vMK9Alfoo=
-----END CERTIFICATE-----