Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
File:                     1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer (raw, json)
Hash identifier:          DweEUNd/ZLA6tsqB8ALzyfa4JvQK61VhL010Ouew7Zk=
Subject key identifier:   D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422202963F3092ADF466657D6868AAF28
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 77.241.68.0/22
                          IP: 2a0d:a940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:29:63:f3:09:2a:df:46:66:57:d6:86:8a:af:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a6:3e:6e:4d:a2:23:e7:b4:23:5d:ae:60:4d:
                    e4:c4:2a:cc:73:d3:5a:3d:cb:90:e4:eb:78:46:37:
                    11:4f:44:5f:19:c7:d2:af:de:f5:45:11:8a:72:06:
                    6c:f3:de:39:49:d9:6c:54:49:49:15:d1:cf:4a:33:
                    88:9c:4f:a9:09:51:4b:08:5f:4b:f6:ba:f4:a3:ea:
                    ee:06:0b:50:91:92:2b:f9:57:31:5e:45:d2:33:30:
                    61:8f:1e:a4:87:af:94:2c:6f:6d:c0:02:61:87:04:
                    06:6d:ac:17:ae:a4:e1:ae:45:f9:1d:4f:0b:3e:36:
                    5d:d0:68:c2:09:34:ec:8e:ad:b3:03:ba:bf:ab:d0:
                    42:34:52:cb:53:f0:cf:c5:97:9d:75:12:24:56:0d:
                    83:56:66:7f:c7:11:9c:bc:42:68:69:75:d1:d1:3b:
                    ac:de:13:9b:4d:fa:b2:bb:c7:2c:ce:24:7e:df:1a:
                    4a:49:96:9c:bb:f7:f0:17:4f:c3:83:6e:fc:d3:e0:
                    ee:3d:d2:6b:93:cf:e6:8d:ea:f8:43:74:a8:a2:31:
                    a0:28:a5:9f:6d:04:0d:8c:0a:df:48:12:ef:35:05:
                    b4:d9:df:de:0f:78:5b:2e:ea:64:d9:0e:c1:42:b4:
                    c5:c8:84:31:d3:2e:d1:e5:ec:3c:29:ad:4c:31:8e:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.241.68.0/22
                IPv6:
                  2a0d:a940::/29

    Signature Algorithm: sha256WithRSAEncryption
         a5:c6:e2:33:81:82:f2:c2:bb:30:96:2b:31:ba:37:50:4d:a4:
         b0:93:70:7d:f7:81:b8:bc:5b:5c:e9:5e:dd:08:46:25:e0:53:
         95:41:cf:e5:1d:a4:8e:09:c3:5d:19:95:12:58:5b:cb:97:78:
         77:76:2b:f1:53:8e:21:d7:1d:35:74:cc:be:1a:0a:9a:10:63:
         ef:14:30:b2:7d:83:40:75:18:23:43:07:62:56:67:20:af:72:
         f9:8d:37:21:4f:28:e8:a3:df:d4:fa:ec:ab:76:c6:6d:67:23:
         3b:2a:92:ae:c9:f1:95:8f:53:00:87:ac:ff:df:be:b0:fd:ac:
         97:d7:8d:44:b2:b4:52:16:c7:ba:96:2f:ef:17:ad:62:e9:3a:
         92:18:53:c2:10:66:f7:da:73:3c:f7:c3:c9:1d:df:fe:7d:90:
         e5:f6:6a:7c:6e:97:a0:d3:c9:76:cc:89:00:ed:3c:fe:2e:10:
         d9:93:82:bf:e1:04:26:9b:12:c6:eb:e2:21:44:06:0b:48:c7:
         b6:9e:da:0f:fe:0e:e2:d7:40:08:05:4f:54:39:2a:4b:f7:4c:
         c3:80:b7:ab:23:22:53:32:61:39:84:be:0e:f5:aa:54:ed:eb:
         9f:e0:10:80:26:d0:68:24:d2:b1:3a:13:4f:bc:75:94:a3:c0:
         84:4b:a3:30
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQiIClj8wkq30ZmV9aGiq8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDRiZDU2NTMwMTNmYTdjYTM0ZjUyMjg0MzA5YTY4OGIyNDllN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KY+bk2iI+e0I12uYE3kxCrMc9Na
PcuQ5Ot4RjcRT0RfGcfSr971RRGKcgZs8945SdlsVElJFdHPSjOInE+pCVFLCF9L
9rr0o+ruBgtQkZIr+VcxXkXSMzBhjx6kh6+ULG9twAJhhwQGbawXrqThrkX5HU8L
PjZd0GjCCTTsjq2zA7q/q9BCNFLLU/DPxZeddRIkVg2DVmZ/xxGcvEJoaXXR0Tus
3hObTfqyu8csziR+3xpKSZacu/fwF0/Dg2780+DuPdJrk8/mjer4Q3SoojGgKKWf
bQQNjArfSBLvNQW02d/eD3hbLupk2Q7BQrTFyIQx0y7R5ew8Ka1MMY5HRwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNRL1WUwE/p8o09SKEMJpoiySeegMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzlhM2Y5
Yi0xYjg3LTQ4NTUtYmEzYy1iNTAxMjY2MjAyMGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvOWEzZjli
LTFiODctNDg1NS1iYTNjLWI1MDEyNjYyMDIwZC8xLzFFdlZaVEFULW55alQxSW9R
d21taUxKSjU2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCTfFEMA0EAgACMAcDBQMqDalAMA0GCSqGSIb3
DQEBCwUAA4IBAQClxuIzgYLywrswlisxujdQTaSwk3B994G4vFtc6V7dCEYl4FOV
Qc/lHaSOCcNdGZUSWFvLl3h3divxU44h1x01dMy+GgqaEGPvFDCyfYNAdRgjQwdi
Vmcgr3L5jTchTyjoo9/U+uyrdsZtZyM7KpKuyfGVj1MAh6z/376w/ayX141EsrRS
Fse6li/vF61i6TqSGFPCEGb32nM898PJHd/+fZDl9mp8bpeg08l2zIkA7Tz+LhDZ
k4K/4QQmmxLG6+IhRAYLSMe2ntoP/g7i10AIBU9UOSpL90zDgLerIyJTMmE5hL4O
9apU7euf4BCAJtBoJNKxOhNPvHWUo8CES6Mw
-----END CERTIFICATE-----