Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
File:                     3YqroPRrqhRP2wk46RwU-UxhZQw.cer (raw, json)
Hash identifier:          IgEYi6EkCBHEQm3Ouq9pNBub189E/XNt/VyLueutsx0=
Subject key identifier:   DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3C400849062427B6BBCA49F6B807C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39645
                          IP: 195.246.252.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c4:00:84:90:62:42:7b:6b:bc:a4:9f:6b:80:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:71:1b:11:67:d1:7f:a7:f7:4b:f7:93:27:
                    98:92:36:70:77:80:cf:96:d2:78:13:8b:64:d0:a3:
                    9e:e6:13:89:3a:61:9e:58:c2:7b:9a:01:65:3e:07:
                    4d:43:9a:47:c5:ac:88:7c:34:33:8f:70:63:82:cd:
                    42:e0:f1:41:c0:ba:b6:d4:30:b6:a9:14:3d:50:16:
                    75:82:97:50:9a:71:63:01:64:e0:62:d4:65:78:6f:
                    25:9f:d9:57:67:bd:a9:d6:6f:9f:38:30:15:c8:26:
                    15:f7:de:47:ac:5c:87:d3:75:11:4f:13:4f:fd:1e:
                    36:74:53:82:26:54:d3:ae:30:aa:08:e2:0b:14:08:
                    5e:ab:24:2a:1b:b7:9c:db:2d:83:20:95:e6:cb:fc:
                    f5:09:9e:14:eb:9d:6a:22:ba:bc:ae:ef:10:c8:08:
                    2f:b1:51:dc:42:83:99:64:70:b6:e8:3c:e1:86:a0:
                    7d:e6:58:f5:f6:6e:d3:04:08:94:e3:13:64:38:65:
                    ef:86:c1:ed:89:a8:09:e6:07:0f:43:5a:2a:7c:8a:
                    11:47:85:6f:75:bc:24:89:61:5d:dd:5f:58:8b:5c:
                    d4:45:69:82:25:41:7c:d4:22:ca:e8:77:26:14:44:
                    25:55:dd:f0:05:27:f2:58:9f:cb:a0:41:d6:51:4d:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.246.252.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39645

    Signature Algorithm: sha256WithRSAEncryption
         4b:eb:6c:32:ea:ca:8d:ad:0d:f8:21:7d:54:aa:0f:04:b7:11:
         55:38:7c:b3:a4:73:41:75:03:ad:7e:88:82:cb:b8:7c:34:27:
         4a:b5:25:48:25:25:6c:f5:d5:73:75:57:24:bf:1d:72:6d:7b:
         12:af:17:88:f0:73:9b:1a:a8:eb:b4:ab:ff:b8:c4:f7:c9:c3:
         b6:d8:67:66:0c:0a:c7:9c:ee:f2:09:60:74:41:72:ae:8b:2a:
         33:af:ac:c7:87:0c:14:56:e2:28:44:05:37:0e:2a:92:fe:c5:
         62:9f:47:0a:81:e0:54:60:82:7e:4e:1f:83:b8:8e:49:d5:75:
         89:92:1d:fc:92:3e:db:cb:8f:40:f4:c8:1e:4f:60:9f:54:0e:
         92:d1:10:72:39:a0:8f:5a:e1:08:24:4f:e0:26:56:44:f3:19:
         9c:1d:37:e9:46:a3:49:7c:1b:cc:50:51:d6:6f:b9:ee:39:78:
         68:d3:07:f6:bb:f2:67:2f:3b:5a:5c:f8:26:31:83:b3:7b:fd:
         ab:91:04:f6:d9:ac:2b:1f:a9:fe:a7:a1:0f:7c:b8:a6:32:8d:
         f2:2d:d7:16:3f:62:c1:80:27:f8:ae:0b:fe:90:07:8d:11:ee:
         3d:d3:b4:e1:f1:be:fc:3e:55:07:f8:ab:7a:cc:e0:76:de:95:
         6b:e0:9b:b4
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQks8QAhJBiQntrvKSfa4B8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDhhYWJhMGY0NmJhYTE0NGZkYjA5MzhlOTFjMTRmOTRjNjE2NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IdxGxFn0X+n90v3kyeYkjZwd4DP
ltJ4E4tk0KOe5hOJOmGeWMJ7mgFlPgdNQ5pHxayIfDQzj3Bjgs1C4PFBwLq21DC2
qRQ9UBZ1gpdQmnFjAWTgYtRleG8ln9lXZ72p1m+fODAVyCYV995HrFyH03URTxNP
/R42dFOCJlTTrjCqCOILFAheqyQqG7ec2y2DIJXmy/z1CZ4U651qIrq8ru8QyAgv
sVHcQoOZZHC26DzhhqB95lj19m7TBAiU4xNkOGXvhsHtiagJ5gcPQ1oqfIoRR4Vv
dbwkiWFd3V9Yi1zURWmCJUF81CLK6HcmFEQlVd3wBSfyWJ/LoEHWUU2jEwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFN2Kq6D0a6oUT9sJOOkcFPlMYWUMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzFmYTI3
ZS1hYWYwLTRiZTItYTUyMi1hODBjOTQ3NjFkMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvMWZhMjdl
LWFhZjAtNGJlMi1hNTIyLWE4MGM5NDc2MWQyMy8xLzNZcXJvUFJycWhSUDJ3azQ2
UndVLVV4aFpRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw/b8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCa3TANBgkqhkiG9w0BAQsFAAOCAQEAS+tsMurKja0N+CF9VKoPBLcRVTh8s6Rz
QXUDrX6Igsu4fDQnSrUlSCUlbPXVc3VXJL8dcm17Eq8XiPBzmxqo67Sr/7jE98nD
tthnZgwKx5zu8glgdEFyrosqM6+sx4cMFFbiKEQFNw4qkv7FYp9HCoHgVGCCfk4f
g7iOSdV1iZId/JI+28uPQPTIHk9gn1QOktEQcjmgj1rhCCRP4CZWRPMZnB036Uaj
SXwbzFBR1m+57jl4aNMH9rvyZy87Wlz4JjGDs3v9q5EE9tmsKx+p/qehD3y4pjKN
8i3XFj9iwYAn+K4L/pAHjRHuPdO04fG+/D5VB/ireszgdt6Va+CbtA==
-----END CERTIFICATE-----