Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
File:                     4CzXYQ92Hg7SUq57ufMPHisXtec.cer (raw, json)
Hash identifier:          ExHhjc411t8Fxw3b9DAlEPytG7j2awfqbzdPwD3/Xa0=
Subject key identifier:   E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B54C4F7C066CF989942990FED93AE6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 31743

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:4c:4f:7c:06:6c:f9:89:94:29:90:fe:d9:3a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:17:9c:b5:01:80:c4:0e:5a:93:3d:5d:80:
                    49:a7:39:67:0a:4c:cb:e8:21:ae:96:e2:ca:84:f8:
                    61:78:6a:37:33:b6:4b:f7:02:d1:91:f9:4b:ce:e1:
                    64:0b:64:17:1d:9c:e6:a4:9f:08:d7:5e:3e:c1:72:
                    f7:5e:fd:29:7f:e6:f9:65:3f:d7:cb:54:b2:f3:07:
                    45:6f:8a:90:44:07:57:fe:81:ef:dc:c1:11:96:f0:
                    23:c0:09:03:40:4e:c9:76:e1:52:c1:47:fd:6c:a5:
                    37:a6:15:bb:19:dd:3a:c1:c1:2c:a4:fa:a5:ac:5b:
                    29:ff:fb:a0:1e:01:8c:4a:b1:14:9a:06:fd:be:58:
                    4f:b9:64:2a:68:ec:18:c9:80:a9:14:ce:a7:ee:92:
                    6e:28:e4:b4:80:70:4e:da:a3:70:67:5d:10:a7:55:
                    16:07:32:52:06:4b:80:83:ef:65:68:02:e3:1c:cd:
                    dd:33:10:57:25:bc:2a:73:2d:50:56:71:05:5a:c6:
                    ed:d9:04:52:27:02:9d:2e:9f:2c:31:b3:ab:de:a1:
                    30:3e:a6:a0:12:64:2c:02:08:c2:24:e8:db:cb:04:
                    0c:74:8e:db:43:1f:ef:4a:4f:90:68:ea:e4:d4:d2:
                    6d:c0:49:d5:a9:6f:5c:11:15:1e:1d:96:c5:e8:68:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31743

    Signature Algorithm: sha256WithRSAEncryption
         15:c5:d4:6a:ff:82:60:02:5c:15:48:84:2f:b7:81:c2:c4:55:
         53:1e:28:a3:f7:4d:2e:33:e9:dd:d8:ae:5a:3f:e3:2e:8f:0b:
         44:22:07:4c:ac:fe:24:ca:67:86:94:83:e0:98:a7:74:e0:ba:
         7c:f4:a2:6b:f2:7e:c6:7c:f7:ad:1d:cc:db:ce:a9:95:2e:f0:
         7e:6e:a8:1f:94:42:15:58:20:ba:e4:f6:37:1c:7a:7f:8d:f8:
         41:6f:4f:4f:43:5b:8e:d3:84:f7:83:af:da:91:e9:eb:5a:0e:
         41:12:a7:de:7f:34:e0:a0:34:3b:26:56:c4:98:7c:3e:73:da:
         cb:b3:1a:23:56:47:32:6e:a7:ae:6f:00:94:ae:fc:50:6f:20:
         81:c1:ac:2b:08:e7:15:3e:2c:9a:4d:95:fb:fb:76:f0:e8:37:
         47:31:68:7a:b7:64:6f:61:9c:24:db:5f:3d:96:a3:f5:20:b5:
         b6:71:ba:4d:dc:f1:3f:be:1b:6b:e3:56:a8:68:20:85:9c:6c:
         5f:6e:81:e5:fc:71:d7:05:a0:e9:c3:b9:a7:16:8a:aa:06:d9:
         ae:e3:03:4f:07:a7:51:ba:92:7a:70:8d:25:bd:0c:12:0a:d2:
         2b:6a:76:e2:80:b0:7e:b5:a4:3c:f2:d0:cc:0c:6d:33:cc:e0:
         eb:89:bd:b1
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAZQntUxPfAZs+YmUKZD+2TrmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDJjZDc2MTBmNzYxZTBlZDI1MmFlN2JiOWYzMGYxZTJiMTdiNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSwXnLUBgMQOWpM9XYBJpzlnCkzL
6CGuluLKhPhheGo3M7ZL9wLRkflLzuFkC2QXHZzmpJ8I114+wXL3Xv0pf+b5ZT/X
y1Sy8wdFb4qQRAdX/oHv3MERlvAjwAkDQE7JduFSwUf9bKU3phW7Gd06wcEspPql
rFsp//ugHgGMSrEUmgb9vlhPuWQqaOwYyYCpFM6n7pJuKOS0gHBO2qNwZ10Qp1UW
BzJSBkuAg+9laALjHM3dMxBXJbwqcy1QVnEFWsbt2QRSJwKdLp8sMbOr3qEwPqag
EmQsAgjCJOjbywQMdI7bQx/vSk+QaOrk1NJtwEnVqW9cERUeHZbF6GgQXQIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFOAs12EPdh4O0lKue7nzDx4rF7XnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2JkYmVl
OS01ZWVlLTQ1NjEtYTUyMy05NDM1MTU5YzkzZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYmRiZWU5
LTVlZWUtNDU2MS1hNTIzLTk0MzUxNTljOTNlYi8xLzRDelhZUTkySGc3U1VxNTd1
Zk1QSGlzWHRlYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAnv/MA0GCSqGSIb3DQEBCwUAA4IBAQAVxdRq/4JgAlwV
SIQvt4HCxFVTHiij900uM+nd2K5aP+MujwtEIgdMrP4kymeGlIPgmKd04Lp89KJr
8n7GfPetHczbzqmVLvB+bqgflEIVWCC65PY3HHp/jfhBb09PQ1uO04T3g6/akenr
Wg5BEqfefzTgoDQ7JlbEmHw+c9rLsxojVkcybqeubwCUrvxQbyCBwawrCOcVPiya
TZX7+3bw6DdHMWh6t2RvYZwk2189lqP1ILW2cbpN3PE/vhtr41aoaCCFnGxfboHl
/HHXBaDpw7mnFoqqBtmu4wNPB6dRupJ6cI0lvQwSCtIranbigLB+taQ88tDMDG0z
zODrib2x
-----END CERTIFICATE-----