Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
File:                     4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer (raw, json)
Hash identifier:          Ip6KrGXRzvXBXoPyN2J5tnWBNdP0JFSHThxcYz/L8uY=
Subject key identifier:   E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC2214CAFF91D8EC48A86EB7FA22B7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199469
                          IP: 185.15.112.0/22
                          IP: 2a03:c240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:22:14:ca:ff:91:d8:ec:48:a8:6e:b7:fa:22:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:a6:a9:80:2d:37:54:2c:ad:87:7a:e8:9e:
                    1f:8d:98:ae:08:51:ae:59:ae:ec:ce:49:c5:40:5f:
                    2f:80:ba:9a:1b:b3:09:3c:fd:1d:b0:09:c6:ee:63:
                    46:ba:3f:6a:dc:cc:29:f2:ea:36:17:e6:3f:69:a1:
                    80:98:15:e2:10:9f:f8:7b:3c:b4:5c:0f:b7:4a:b5:
                    0d:24:45:52:de:26:57:bd:42:87:25:3b:be:7b:a2:
                    bd:05:1d:ed:9d:e3:ba:c9:72:55:ad:68:7f:61:1d:
                    bc:e9:77:7a:cf:9c:87:9c:d9:fb:3a:80:b7:26:b4:
                    c8:9a:72:00:5a:00:e8:c0:87:73:15:30:da:e0:e7:
                    27:e7:1d:62:dc:32:a8:dd:78:0f:29:24:07:81:d4:
                    3a:c8:ee:07:98:a8:75:f2:0c:25:d7:1f:39:0e:fa:
                    a8:64:af:bc:8b:e4:87:8d:90:69:30:88:3c:e2:a5:
                    3b:8f:6b:9a:b8:f0:c6:4f:37:86:72:58:6b:9a:8c:
                    75:d5:2d:84:64:0d:fd:d7:39:2a:65:4d:b7:ee:c0:
                    7a:ab:f2:16:81:29:b2:e7:7e:46:a0:9c:8a:b8:29:
                    f4:2a:bd:68:25:01:a7:ef:1f:7d:8f:ef:37:fb:b6:
                    a1:a1:aa:9b:e3:66:bf:31:29:c8:0a:eb:d7:90:c4:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.15.112.0/22
                IPv6:
                  2a03:c240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199469

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:4e:22:c8:0c:88:9a:98:28:b9:8e:e4:6c:57:1f:e4:da:
         08:ac:c1:44:13:db:2c:af:8d:ba:41:b0:ee:2f:bd:79:fd:62:
         81:2c:f8:b5:01:d6:2f:08:01:90:59:92:36:b1:d0:f6:76:aa:
         38:f4:9f:d1:d8:5d:1c:16:14:cb:8a:84:d6:af:7f:24:ba:85:
         fb:4b:65:cc:16:24:a3:23:b8:26:6a:82:1b:b3:b2:85:ea:19:
         f3:d9:29:41:19:9b:2f:15:39:2d:b1:1d:43:0f:59:77:74:8e:
         59:79:65:a5:ea:11:22:72:90:e1:9c:78:d1:67:83:06:07:7b:
         70:ab:10:fd:5d:15:09:f4:77:c8:99:8c:34:08:ef:23:d9:4f:
         11:94:bb:8c:9b:76:53:ac:d5:0f:02:ef:5b:fb:83:36:af:f7:
         7b:5d:f2:0f:b6:96:34:c3:32:1c:d2:d9:d5:22:7e:e9:35:c2:
         74:d0:b6:b3:a8:b5:cb:0b:2b:ac:3b:bc:fd:95:93:e1:79:1c:
         2a:06:c8:8d:27:3c:f9:01:de:31:39:57:0f:ef:98:f5:53:fd:
         12:60:18:a4:7e:a0:a8:30:e5:d0:4c:63:02:73:06:9e:5e:fc:
         62:cc:b9:c9:c0:43:8e:53:52:ef:65:6b:dc:1e:34:b0:0d:ec:
         7f:07:ba:3c
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi/CIUyv+R2OxIqG63+iK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzFhYmEzYzJmNTYyODNjZTVjNzRiY2U0MDU4NDRjMTU5MWJhYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKumqYAtN1QsrYd66J4fjZiuCFGu
Wa7szknFQF8vgLqaG7MJPP0dsAnG7mNGuj9q3Mwp8uo2F+Y/aaGAmBXiEJ/4ezy0
XA+3SrUNJEVS3iZXvUKHJTu+e6K9BR3tneO6yXJVrWh/YR286Xd6z5yHnNn7OoC3
JrTImnIAWgDowIdzFTDa4Ocn5x1i3DKo3XgPKSQHgdQ6yO4HmKh18gwl1x85Dvqo
ZK+8i+SHjZBpMIg84qU7j2uauPDGTzeGclhrmox11S2EZA391zkqZU237sB6q/IW
gSmy535GoJyKuCn0Kr1oJQGn7x99j+83+7ahoaqb42a/MSnICuvXkMQdTwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOMaujwvVig85cdLzkBYRMFZG6v8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2Y4MzA3
My05ZTgwLTQyZjItYjBhOC01ZjI4MTM3YTc2NTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjgzMDcz
LTllODAtNDJmMi1iMGE4LTVmMjgxMzdhNzY1OC8xLzR4cTZQQzlXS0R6bHgwdk9R
RmhFd1ZrYnFfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQ9wMA0EAgACMAcDBQAqA8JAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMLLTANBgkqhkiG9w0BAQsFAAOCAQEAAvVOIsgMiJqY
KLmO5GxXH+TaCKzBRBPbLK+NukGw7i+9ef1igSz4tQHWLwgBkFmSNrHQ9naqOPSf
0dhdHBYUy4qE1q9/JLqF+0tlzBYkoyO4JmqCG7OyheoZ89kpQRmbLxU5LbEdQw9Z
d3SOWXllpeoRInKQ4Zx40WeDBgd7cKsQ/V0VCfR3yJmMNAjvI9lPEZS7jJt2U6zV
DwLvW/uDNq/3e13yD7aWNMMyHNLZ1SJ+6TXCdNC2s6i1ywsrrDu8/ZWT4XkcKgbI
jSc8+QHeMTlXD++Y9VP9EmAYpH6gqDDl0ExjAnMGnl78Ysy5ycBDjlNS72Vr3B40
sA3sfwe6PA==
-----END CERTIFICATE-----