Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
File:                     4z5OBZxk_xm-EKehUEV1YeRV0U8.cer (raw, json)
Hash identifier:          ciuXWT+8RBcQxwq6UkmjFZ9YvtlvW8jnjnFgUN1OKq4=
Subject key identifier:   E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521DDF84289286C3A2C442260A2AB5D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200947
                          IP: 185.82.44.0/22
                          IP: 2a05:8d80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:dd:f8:42:89:28:6c:3a:2c:44:22:60:a2:ab:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e33e4e059c64ff19be10a7a150457561e455d14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:d8:2e:9d:c3:81:1c:86:76:bf:ea:b1:c1:
                    fe:7c:5e:6b:39:79:88:1e:bc:77:03:86:47:9f:a7:
                    91:72:87:8d:62:04:76:0c:06:34:ba:41:ef:65:54:
                    bd:f5:a3:3b:82:2d:db:81:d1:1d:40:05:18:dd:6a:
                    c2:66:8e:4e:54:99:34:55:3c:73:ce:ea:06:f5:54:
                    f6:be:76:7c:dd:83:2f:3a:53:df:64:76:1d:8b:0b:
                    14:c3:da:6d:99:06:1f:9f:2f:1a:9d:9e:c5:fb:e8:
                    92:ac:27:2c:b1:1e:75:97:a0:2e:b6:bd:ae:71:5f:
                    ce:71:05:73:82:85:9b:39:58:b9:40:e9:5d:c7:13:
                    60:0e:00:c3:37:07:28:b1:ad:61:d0:d8:81:e5:b6:
                    84:b8:63:5a:ea:6a:f6:3a:2f:b5:09:bb:bf:60:fe:
                    ee:42:60:43:6d:ea:6f:65:14:c0:88:c4:ab:c7:13:
                    16:4f:35:71:29:26:62:c9:9c:98:40:95:fd:bc:9e:
                    75:cd:8f:6e:de:46:de:8d:62:c4:72:61:16:18:b3:
                    95:80:9c:ec:f2:b1:b2:28:70:d1:bd:c6:bb:c0:f7:
                    6c:d3:83:e1:f4:2f:fc:6a:01:da:1b:0b:42:b8:50:
                    7c:bf:97:1b:68:64:27:5d:13:03:02:d3:55:8a:30:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.44.0/22
                IPv6:
                  2a05:8d80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200947

    Signature Algorithm: sha256WithRSAEncryption
         3d:9a:0f:c0:1a:8e:36:25:bb:dd:89:06:16:a3:f8:2a:53:ed:
         3b:19:0f:4a:59:c9:be:6e:44:b7:46:1c:8c:ca:88:f3:d4:ad:
         6b:fa:1e:d2:4e:33:20:0b:c0:c8:43:94:a8:0b:e8:9c:8d:38:
         9d:e7:c0:ac:b5:92:74:70:e3:fc:e0:c0:95:b0:0e:3e:38:31:
         0d:dd:22:9b:36:00:64:5e:ab:a7:79:d2:7b:38:c6:ae:c2:3c:
         eb:64:6d:ed:d4:cf:ed:cb:80:1b:10:91:33:83:01:90:a2:b9:
         61:34:49:80:d1:76:68:5d:51:7c:9a:b6:71:45:1a:55:cb:35:
         0a:f4:c0:1d:1e:c4:8d:b3:dd:d6:60:b2:70:44:17:5e:63:9a:
         15:f4:68:78:ad:2b:eb:07:4c:ff:ee:b3:4f:f9:bb:10:80:a7:
         b9:1a:cd:bd:aa:69:d4:d5:80:a9:0e:34:70:85:9e:ef:0a:83:
         bd:55:28:f8:b0:80:2e:38:bb:8f:c6:d3:3f:16:de:6e:00:1e:
         54:c3:7e:f6:d2:56:f9:43:f5:6e:e1:8f:b9:75:aa:1f:3d:25:
         87:a6:a3:8c:74:29:a0:66:ac:94:51:2a:d2:b5:c2:1d:80:45:
         00:9d:60:e6:50:b0:9e:44:b1:4c:59:f1:3c:d8:5c:8d:77:4d:
         52:26:0d:39
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlId34QokobDosRCJgoqtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzNlNGUwNTljNjRmZjE5YmUxMGE3YTE1MDQ1NzU2MWU0NTVkMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEXYLp3DgRyGdr/qscH+fF5rOXmI
Hrx3A4ZHn6eRcoeNYgR2DAY0ukHvZVS99aM7gi3bgdEdQAUY3WrCZo5OVJk0VTxz
zuoG9VT2vnZ83YMvOlPfZHYdiwsUw9ptmQYfny8anZ7F++iSrCcssR51l6Autr2u
cV/OcQVzgoWbOVi5QOldxxNgDgDDNwcosa1h0NiB5baEuGNa6mr2Oi+1Cbu/YP7u
QmBDbepvZRTAiMSrxxMWTzVxKSZiyZyYQJX9vJ51zY9u3kbejWLEcmEWGLOVgJzs
8rGyKHDRvca7wPds04Ph9C/8agHaGwtCuFB8v5cbaGQnXRMDAtNVijBP3wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzNiYmUw
MS0wYTE0LTQxYmYtOTdkYS0yYjJhOGJhNjEyZmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvM2JiZTAx
LTBhMTQtNDFiZi05N2RhLTJiMmE4YmE2MTJmZC8xLzR6NU9CWnhrX3htLUVLZWhV
RVYxWWVSVjBVOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVIsMA0EAgACMAcDBQMqBY2AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQ8zANBgkqhkiG9w0BAQsFAAOCAQEAPZoPwBqONiW7
3YkGFqP4KlPtOxkPSlnJvm5Et0YcjMqI89Sta/oe0k4zIAvAyEOUqAvonI04nefA
rLWSdHDj/ODAlbAOPjgxDd0imzYAZF6rp3nSezjGrsI862Rt7dTP7cuAGxCRM4MB
kKK5YTRJgNF2aF1RfJq2cUUaVcs1CvTAHR7EjbPd1mCycEQXXmOaFfRoeK0r6wdM
/+6zT/m7EICnuRrNvapp1NWAqQ40cIWe7wqDvVUo+LCALji7j8bTPxbebgAeVMN+
9tJW+UP1buGPuXWqHz0lh6ajjHQpoGaslFEq0rXCHYBFAJ1g5lCwnkSxTFnxPNhc
jXdNUiYNOQ==
-----END CERTIFICATE-----