Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
File:                     48hcN60lJ0xxLCRHPgeK3Ocywd0.cer (raw, json)
Hash identifier:          pPZteHPDdc5/CY0iDsLtzxKeevsq2PbSpstuq/EAm2A=
Subject key identifier:   E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B37A1ACE6084D29E02EB6751E3B527
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.34.16.0/22
                          IP: 2a04:5e00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:7a:1a:ce:60:84:d2:9e:02:eb:67:51:e3:b5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e3c85c37ad25274c712c24473e078adce732c1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ee:a5:19:0d:93:9c:73:ba:b0:e0:35:79:1b:
                    85:aa:2d:ad:e4:9e:c8:0b:a7:07:c7:11:d2:28:aa:
                    b3:c8:e6:c1:4c:fe:db:06:42:5d:3a:f9:3e:43:a3:
                    ff:a2:02:f1:2e:aa:75:54:9a:67:ef:aa:ca:a0:ed:
                    e3:aa:3c:56:3c:1e:6d:5a:36:d6:42:d9:d4:49:d4:
                    81:cd:3c:90:a8:0f:da:26:a6:d7:96:ac:74:60:90:
                    d3:0e:fb:2f:ba:68:d5:75:b5:de:b2:f2:9f:e2:ce:
                    06:e8:62:5c:60:2e:c6:a6:07:da:e4:ce:90:3b:7f:
                    1e:e5:53:af:48:5f:9e:71:6e:87:b5:80:6a:7e:1d:
                    08:9a:48:00:c7:24:8a:0c:02:d2:00:fb:cc:29:35:
                    84:96:fc:3f:ab:98:0a:21:07:4d:df:4a:d3:09:01:
                    00:df:ca:24:ad:be:76:e9:a2:e6:c6:95:8d:e9:b0:
                    be:cd:76:3a:99:a2:26:71:b7:1f:91:bc:05:b6:58:
                    b3:4c:d1:d8:4c:81:9d:71:f8:cf:18:93:d8:a4:93:
                    f9:cc:5e:e8:7a:96:9c:db:65:10:ef:90:38:99:94:
                    80:30:34:ad:14:f0:4f:3c:f5:ba:d2:aa:7c:0f:37:
                    fd:d9:23:13:d2:14:78:92:20:bf:a0:0a:82:1a:9f:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.16.0/22
                IPv6:
                  2a04:5e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         97:58:77:80:03:b3:e2:6f:cd:d7:a3:60:e6:db:0a:71:92:73:
         f5:04:c5:ca:e0:17:a4:71:14:f8:90:87:0f:f9:df:b0:8a:ef:
         eb:0a:09:a6:79:db:57:88:61:1e:26:12:c1:7c:46:44:0f:ee:
         19:63:ba:7e:7d:fb:68:0a:dd:a4:7a:bf:b9:65:df:14:0e:ee:
         3a:4e:42:52:26:42:54:6c:09:ff:90:ce:e9:81:41:b8:08:ce:
         c2:dd:2a:59:7c:5e:78:e0:af:21:16:95:05:cc:a9:8b:29:7d:
         54:c9:3a:9a:ff:9e:4c:63:83:09:48:db:37:e8:d0:9a:8a:7e:
         82:27:74:28:0f:1c:2d:d3:0c:84:7f:48:de:8f:5a:d8:31:c7:
         29:d0:ee:33:c9:45:f4:86:06:c6:d6:54:c4:5d:50:b6:23:fe:
         f9:2d:d2:12:c6:86:f0:74:2f:85:8f:b9:80:ba:c8:10:f1:4f:
         f1:69:8a:9d:f2:e6:d1:d7:5a:c9:3f:fe:ba:c7:06:01:76:a9:
         72:c8:2d:07:b0:ba:ed:fc:7b:23:ea:71:5c:c8:3e:4f:e1:7f:
         06:00:16:f6:af:40:bf:a1:cc:12:66:03:8b:cf:82:82:f9:3b:
         2a:1b:9b:76:7a:62:20:3c:f6:77:d0:64:8d:99:10:64:41:d4:
         36:c2:1e:04
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQks3oazmCE0p4C62dR47UnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2M4NWMzN2FkMjUyNzRjNzEyYzI0NDczZTA3OGFkY2U3MzJjMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+6lGQ2TnHO6sOA1eRuFqi2t5J7I
C6cHxxHSKKqzyObBTP7bBkJdOvk+Q6P/ogLxLqp1VJpn76rKoO3jqjxWPB5tWjbW
QtnUSdSBzTyQqA/aJqbXlqx0YJDTDvsvumjVdbXesvKf4s4G6GJcYC7Gpgfa5M6Q
O38e5VOvSF+ecW6HtYBqfh0ImkgAxySKDALSAPvMKTWElvw/q5gKIQdN30rTCQEA
38okrb526aLmxpWN6bC+zXY6maImcbcfkbwFtlizTNHYTIGdcfjPGJPYpJP5zF7o
epac22UQ75A4mZSAMDStFPBPPPW60qp8Dzf92SMT0hR4kiC/oAqCGp8+yQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOPIXDetJSdMcSwkRz4HitznMsHdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5L2M2NzU2
YS0xYmMwLTQ5MzgtODAxNS1kY2UzZmEzZmJhZTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYzY3NTZh
LTFiYzAtNDkzOC04MDE1LWRjZTNmYTNmYmFlOS8xLzQ4aGNONjBsSjB4eExDUkhQ
Z2VLM09jeXdkMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuSIQMA0EAgACMAcDBQMqBF4AMA0GCSqGSIb3
DQEBCwUAA4IBAQCXWHeAA7Pib83Xo2Dm2wpxknP1BMXK4BekcRT4kIcP+d+wiu/r
CgmmedtXiGEeJhLBfEZED+4ZY7p+fftoCt2ker+5Zd8UDu46TkJSJkJUbAn/kM7p
gUG4CM7C3SpZfF544K8hFpUFzKmLKX1UyTqa/55MY4MJSNs36NCain6CJ3QoDxwt
0wyEf0jej1rYMccp0O4zyUX0hgbG1lTEXVC2I/75LdISxobwdC+Fj7mAusgQ8U/x
aYqd8ubR11rJP/66xwYBdqlyyC0HsLrt/Hsj6nFcyD5P4X8GABb2r0C/ocwSZgOL
z4KC+TsqG5t2emIgPPZ30GSNmRBkQdQ2wh4E
-----END CERTIFICATE-----